How to make whatsapp work through proxy


How to Run WhatsApp on a Proxy Server

Today, in this tutorial, we’ll be showing you how to run WhatsApp on a proxy server, using ProxyRack.

WhatsApp is the foremost instant messaging platform around, with billions of active users across the globe. However, for some reasons, there is restriction (partial or full) on the use of this app in some locations. And the residents in such locations are legally barred from using the platform, or enjoying some of its services.

With the recent development, however, there are now several avenues to override such restrictions. And one of such avenues is the use of a proxy server – to spoof your IP and bypass any restriction placed on WhatsApp in your location.

In the same vein, you may have proxy networks offering free internet access in your area; and to connect to such networks, you’d need the service of a proxy server.

Anyway, should you need WhatsApp proxies for whatever reason, ProxyRack server is one of the most ideal choices for you. And this tutorial will show you how to run WhatsApp on the server. Read on!

How to run WhatsApp on a proxy server using Proxyrack

As emphasized earlier, ProxyRack is one of the largest private proxy service providers in the world. Its services are offered in designated suites, all of which come with IP while-listing and user:password authentication. So, you’re basically provided everything you need need to spoof your IP. All you have to do is sign up and subscribe to a plan, and you’re good to go.

There are over 60,000+ proxies, hosted in three locations – Chicago, New York and Boston – in the US. Of these, New York has the largest server presence, with over 40,000 proxies hosted in the region.

Below are brief outlines of the various proxy packages on offer (to WhatsApp users):

Find the perfect Proxy Product.

Proxyrack offers a multiple options to suit most use cases, if you are unsure our 3 Day Trial allows you to test them all.

Residential proxies

Never get blocked, choose your location

View all option available
Datacenter proxies

Super fast and reliable

View all option available
3 Day Trial

Test all products to find the best fit

View all option available

Rotating WhatsApp Proxies

This package is best suited for WhatsApp users looking for non-exclusive IPs for WhatsApp. The package offers both HTTP and HTTPS protocols, with moderate connection speed. It’s also suitable for masking IPs on other SaaS and web-based services.

Shared WhatsApp Proxies

The “Shared Rotating Proxies” package is exclusive to WhatsApp. And its proxies are characterized by fast speed and reliable connection, with both HTTP and HTTPS on offer. Interestingly, the proxies under this package come directly from WhatsApp data centers in the US. Furthermore, the “shared” package, as the name implies, is best suited for many people, preferably connected on the same network.

Dedicated WhatsApp Proxies

This package is specially designed to serve only one WhatsApp user; its proxies cannot be shared with anyone. Here, the proxies are quite fast, and connection is secure and highly reliable. Also, both the insecure (HTTP) and secure (HTTPS) protocols are supported.

The above outlined packages are the main servicess on offer; however, there are generally four different plans; three rotating plans and one private plan. The plans include:

  • Residential Rotating Proxies

With this plan, you get access to over 1,250,000 unique IPs per month. However, despite the large IP coverage, the proxies are not as fast and reliable as those of other plans.

  • USA Rotating Proxies

This plan hosts fewer IPs, typically in the region of 10,000, but it’s more reliable and faster than the first plan. Also, hosted proxies come directly from WhatsApp’s data centers in the US; hence, the plan is available to only US residents.

  • Mixed Rotating Proxies

This plan is characterized by super fast speed and standard reliability, with over 20,000 unique IPs on standby. Like the “USA Rotating Proxies”, “Mixed Rotating Proxies” also come directly from WhatsApp’s data centers.

  • Private Proxies

This plan, as the name implies, is best suited for personal use; with extended support for two more users. The proxies here are characterized by fast speed and reliable connection. Each proxy goes for $0.50 ($5 per 10 proxies), and you can select from any of the available locations.

What is proxy server? Why is it important to WhatsApp users?

First off, for the tech novices; proxy server is a special network server, which can be used to conceal IP presence (address) on the internet. Its functions are more or less the same as those of a VPN. Moreover, it offers several server options (proxies) for masking IP address and bypassing geo-restrictions.

Typically, proxies are major components of any standard VPN; however, such proxies are generally less reliable compared to those of a designated proxy server like ProxyRack. Hence, if you need to conceal your location (IP address) on WhatsApp or the internet – proxy server is the way to go. Nevertheless, ProxyRack comfortably stands out as one of the best available proxy server providers for WhatsApp and other SaaS-based services.

A frequently asked question here is: Why do I need a proxy server for WhatsApp? The answer to this is quite simple.

As pointed out earlier, WhatsApp is partially or fully restricted in some countries in South America, Asia and Middle East. And while the citizens of such countries may be used to such restrictions, visitors often find it extremely inconvenient. Therefore, to gain full access to WhatsApp in such regions, users often employ the use of proxy servers.

Similarly, you may want to connect to the internet (and access WhatsApp) over a proxy network in your area. To do this, you’d need the service of a proxy server. Most proxy networks are typically found in public places – in school premises, malls, clinics, and libraries among others. So, when in such places, users may want to save their cellular data by connecting to the available proxy internet network.

Lastly, certain users may seek to mask their real IPs, simply for security purpose or just for the fun of it. And to achieve your goal, you’d need the “IP masking services” of a standard proxy server like ProxyRack.

How to set up your proxy settings

Go to the designated page on ProxyRack’s website to subscribe to a plan. Once you’ve subscribed and set up the server, proceed to configure the proxy settings on your device.

This procedure varies across devices; hence, for convenience, we’ll be showing you the procedures for Android, iOS and web clients.

Check out our Residential Rotating Proxies for WhatsApp

Check out our USA Rotating Proxies for WhatsApp

Check out our Mixed Rotating Proxies for WhatsApp

Check out our Private Residential Proxies for WhatsApp

On Android

Android is the most used operating platform in the world, and that’s inclusive of all mobile and desktop operating systems. Also, a larger percentage of WhatsApp users run the app on Android. Therefore, the procedure to configure proxy settings (via Proxy Rack) on Android takes the forefront.

Here’s how:

  • Tap on the home menu icon on your device.

  • Locate and tap on the Settings app (the gear icon).

  • In the Settings window, scroll down and tap on the Wi-Fi icon.

  • Enable Wi-Fi – toggle on the icon.

  • Locate and select the appropriate Wi-Fi network.

  • Tap on the Modify Network or EDIT option.

  • Check the Show advanced options box and tap on the Proxy dropdown.

  • On the prompted options, select Manual – to manually configure your proxy settings.

  • In the next window, input your “Proxy/Server IP” (as provided by Proxy Rack) in the Proxy Host Name field.

  • Fill in the Proxy Port field as appropriate (this detail is also provided by ProxyRack).

  • Tap on the Authenticate server radio button to enable it.

  • Fill in your ProxyRack’s authentication credentials; your username and password.

  • Tap on Connect in the prompted.

  • Enjoy!

After the whole procedure, launch WhatsApp and start enjoying your chats without hindrance.

On iOS

If you’re looking to run WhatsApp on a proxy server, using your iPhone or iPad, follow the steps below:

  • Subscribe to a plan on ProxyRack’s website and finish the setup as prompted.

  • Now, go to your iPhone or iPad’s homepage.

  • Locate the Settings icon. Then tap on it.

  • In the Settings window, tap on the Wi-Fi icon.

  • Select the target Wi-Fi network.

  • Locate the HTTP Proxy menu and select Manual under it.

  • Now, fill in the following fields with the details provided by ProxyRack:

  • Server IP; and

  • Port.

  • Toggle on the Authentication option.

  • Fill in the username and password assigned to you.

  • Follow the prompt commands to finish up.

After configuring your proxy settings with ProxyRack’s WhatsApp proxies, as described above; you can proceed to launch your WhatsApp and start enjoying your chats without hindrance.

On web clients

This is applicable to the web edition of WhatsApp, which is widely deployed on PCs and Macs. So, if you’re looking to mask your IP address on WhatsApp Web via proxy server, you’re duly covered by ProxyRack.

For convenience, the procedure here will focus on Chrome browser. Here’s how to do this:

  • First off, subscribe to a “WhatsApp proxies” plan on ProxyRack’s website.

  • Set it up as prompted, to get the relevant details (Port, IP and others).

  • Launch Chrome and navigate to the top right-hand corner of your screen.

  • Locate and click on the Customize and Control Google Chrome option.

  • Select Settings > Show Advanced Settings.

  • Locate and click Network > Change proxy settings.

  • In the next window – Internet Properties – locate and click on LAN Settings.

  • In the LAN Settings window, check the Proxy Server checkbox.

  • Fill in your “HTTP proxy” and “Port” (sent to you by ProxyRack) in the designated fields.

  • Click OK to save the new settings and follow the prompt commands to establish connection.

  • Exit window and start enjoying your chats unhindered.

Now, launch “WhatsApp Web” on your Chrome browser and start enjoy your chats, without having to worry about location compromise.

Find the perfect Proxy Product.

Proxyrack offers a multiple options to suit most use cases, if you are unsure our 3 Day Trial allows you to test them all.

Residential proxies

Never get blocked, choose your location

View all option available
Datacenter proxies

Super fast and reliable

View all option available
3 Day Trial

Test all products to find the best fit

View all option available

What’s Up With WhatsApp Proxies? How to Use A WhatsApp Proxy

In the early days of old, staying connected meant trusting a team of horses pulling a stagecoach across the country to deliver a handwritten letter. Later on, with the invention of the telephone by Alexander Graham Bell in 1876, it meant picking up the receiver and relying on a switchboard operator to connect you to whomever you wished to speak with. Fast forward to the mid-2000s, and the internet enabled global communication to happen as fast as you could type something up using your keyboard. Today, we simply have an app for that. We call it WhatsApp—the cross-platform mobile messaging system.

Serving 2 billion users worldwide as of February 2020, Whatsapp is certainly no slouch in the instant messaging world. Even so, there remain places around the globe where the acceptance and integration of WhatsApp into society still fall behind the times. So, how do you ensure you always have access to WhatsApp regardless of where you are in the world? The answer is you use a WhatsApp proxy.

Read on to learn just what a WhatsApp proxy is how to take your WhatsApp experience to the next level by unlocking a whole new world of staying connected.

Table of Contents

  • 1. What’s Up with a WhatsApp Proxy?
  • 2. Bypassing Restricted Access via WhatsApp Proxies
  • 3. Scraping Data Using a Proxy for WhatsApp
  • 4. How to Use WhatsApp Behind a Proxy
  • 5. The Right Way to Use a WhatsApp Proxy

What’s Up with a WhatsApp Proxy?

Before I dive into discussing the many ways how you can use WhatsApp proxies to your benefit, I should say a word about exactly what a WhatsApp proxy is. A proxy is a specialized network server that can be used to conceal one’s IP address from the internet and the websites he or she visits. This is possible because of how—or rather, where—a proxy connects to the internet. See, when you open your web browser and begin to search the internet, every new search you make and every web page you visit makes a connection to your computer. Your device, whether a desktop computer or mobile smartphone or tablet, then shares its digital network address—or IP address—so that the site you’re requesting information from can properly deliver that information to you. In this normal manner of online communication between your computer and the internet, the internet (and anyone else who may be observing your online activity) knows exactly where the request is originating from and who is making it. In other words, it knows who you are.

Using a proxy is a bit different, however. Instead of the internet communicating back and forth with your device directly, your proxy will act as your liaison, taking your requests and making them on your behalf. Because the internet only ever deals with your proxy, it only ever recognizes the proxy’s IP address—meaning you stay perfectly anonymous and hidden from the prying eyes of the internet’s privacy pirates and advertising engines.

Depending on how you intend to use your proxies, you can also gain additional advantages that’ll further increase the freedom and enjoyment of your online experiences. In the next sections, we’ll cover some of these key aspects concerning using a proxy for WhatsApp.

Bypassing Restricted Access via WhatsApp Proxies

Even with its mobile-friendly technology, WhatsApp’s messaging system is still localized within a single app. That can create challenges for you to stay connected, especially when trying to market your content to a wider audience in today’s social media maelstrom. Luckily, there’s a way around this problem. All you need is a few WhatsApp proxies.

Indeed, one of the best advantages of using multiple WhatsApp proxies is the ability to create multiple WhatsApp accounts. This is possible thanks to a proxy’s ability to hide your IP address from the internet and sharing its own in its place. Having multiple proxies with differing IPs means you can create multiple accounts without being blocked or outright banned by WhatsApp’s account restrictions.

A proxy for WhatsApp will even get you passed any account bans that you may have been placed against you. Simply swap your proxy out for a different one (it’s a good idea to have several for this very reason) and you’ll be able to access the WhatsApp app just as you normally would.

A WhatsApp proxy is also great for bypassing geo-restricted content, such as when traveling to a country where WhatsApp is blocked. This can be especially useful when traveling to Middle Eastern or Asian countries where social messaging platforms are highly regulated by the state government. Because a proxy can originate a request from a different location than that of where you actually are, the local network never recognizes that the requests are coming from outside—or within—the restricted region. Therefore, after using a proxy to bypass network restrictions for WhatsApp, web blocked content then becomes accessible as if the app were never blocked in the first place.

Scraping Data Using a Proxy for WhatsApp

Ever wonder how you could analyze your WhatsApp account performance without spending hours of excruciatingly tedious manual data collection? Well, you’re in luck because a WhatsApp proxy can help you with that. You simply need to perform a bit of web scraping.

Web scraping is the process of extracting information from a web page and compiling it into a condensed, organized manner for later evaluation. The nature of the data you can scrape is virtually limitless. You can scrape for market insights regarding product research and performance, site user trends, review and comment analysis, and even monitor and compare prices between products from different competitors. WhatsApp web scraping furthermore provides you insights on how to improve your account’s popularity and how to correct marketing campaigns or active content that isn’t performing to the level you want it to.

To do this, one of the key components of this process is to enlist the use of a scraping robot which will automatically and incredibly quickly compile the data you request for you. However, because many websites dislike their data being mined without their permission, they put in place bot blocking protocols to identify and block any unusual activity that actual humans couldn’t perform. A blocked bot means you’re dead in the water without any data to analyze.

This is where your WhatsApp proxies come into play.

As your bot works, it’ll undoubtedly be caught by WhatsApp’s bot blocking protocols. When that happens, the IP address used by the bot will be blocked. However, having a massive number of proxies—from a couple hundred to several thousand depending on the size of the scraping project—enables the bot to quickly switch proxies (ergo, IP addresses) and continue scraping.

WhatsApp web scraping responsibly

In the words of Spider-Man’s Uncle Ben, “With great power, comes great responsibility.”

While scraping web pages for insights on how users interact with particular sites is something widely acceptable and incredibly valuable to website owners being able to make their content more visible to people across the world, there is a line that must never be crossed. Scraping public data from a website, such as the number of unique daily visits, length of stay, or whether or not someone liked, saved, or bought something from the sight is all well and fine. Every online analyst and web marketer has done this. Data scraping social media groups is a great example of this approach.

What is always off-limits is people’s personal data. No one wants their thoughts and personal messages stolen and subsequently shared with or sold to complete strangers who may or may not use that information with harmless intent. After all, would you want that to happen to you?

Having a proxy for accessing WhatsApp is an incredible privilege. Ensuring that that privilege is enjoyed responsibly guarantees not only you have the best online experience, but everyone else does as well.

How to Use WhatsApp Behind a Proxy

Now that you’ve learned all about the multitude of ways you can use WhatsApp proxies to enhance your mobile messaging app experience, it’s time to help you actually use them. If you’ve tried using proxies in the past but had no idea how to correctly set them up, don’t get discouraged. There’s no reason to quit using WhatsApp over proxy setting frustrations. Besides, we’re here to make your life easier and get you back online in no time.

Your first step in using your WhatsApp proxies is ensuring that you bought them from a trusted provider. We mention this because using proxies from a less than reliable source, or worse, installing free public proxies, is a recipe for personal disaster. Public proxies especially put you at risk of having your personal data stolen by hackers and identity thieves who often use the lure of free proxies to prey on unsuspecting victims. It’s best to stick with purchasing your proxies from a trusted source, even if it costs you a bit up front.

Once you’ve confirmed that your proxies are safe, you need to install them on your computer. Depending on which web browser you prefer, this will look a bit different. There are a couple of general ideas to keep in mind, though. First, check that your proxies and operating system are compatible. Having one or the other not meet the other’s level of performance will likely lead to unreliable performance and mean you aren’t getting the best return on your investment.

Second, be sure that you know what type of proxy you’re using. This not only helps you understand how your proxies operate, but also how to refer to them in the setup process. Several web browsers will ask you to specify the type of WhatsApp proxy you’re wanting to use. For example, when configuring WhatsApp desktop proxy settings for Windows in the Firefox browser, you’ll need to denote your proxy as a WhatsApp SOCKS proxy, HTTP proxy, etc.

If you want a complete guide to installing your WhatsApp proxies, check out our blog on setting up proxies on your favorite browsers here. For now, though, we’ll be covering how to set up a WhatsApp proxy on the most common operating systems—your mobile devices.

WhatsApp proxy Android Setup

Configuring your WhatsApp Android proxy settings begins by opening your “Android System Settings.” Next, tap “Network & Internet” from the drop-down menu. Your next step will be to select “Mobile network,” followed by clicking “Advanced,” and then “Access Point Names. ” This will display the APN you are currently using. Click to edit, and then enter the IP address and port number of the proxy you want to use, as well as that proxy’s username and password authentication credentials. Be sure to save your changes before exiting.

After exiting, turn off and once more turn on your mobile data. Next, open your mobile device’s web browser and provide any authentication info needed if and when prompted to log-in and begin using your WhatsApp proxy.

WhatsApp proxy iPhone Setup

Setting up your proxy for WhatsApp on iPhone and other mobile Apple devices is even simpler than Android. To start, open your iPhone “Settings” app. Continue by going to the “Wi-Fi” connections tab. If you aren’t already connected to a network, connect to a trusted Wi-Fi network. After you’ve successfully connected, click on the “info” icon ( (i) ) and scroll down to where you see “Configure Proxy.” Tap on it and then select “Manual” for manual configuring of a proxy. Toggle “Authentication” on and enter your proxy username and password. Finally, hit “Save” and you’re all set to begin browsing using your new WhatsApp proxy!

How to Use a WhatsApp Proxy—The Right Way

So, do you want to know the right way to use a WhatsApp proxy? Why just as you’d normally use the internet of course!

See, for all its dynamic uses, a WhatsApp proxy is quite simple to use in your daily life. Once it’s set up, you can honestly surf the web like any other time you have in the past. The only difference now is that your proxies will provide you the added protection from online threats, give you greater access to restricted content worldwide, and help you effectively analyze and market your account content. Oh, and also offer you substantially more privacy while going about your online activity, too.

And again, please use WhatsApp proxies wisely and responsibly. Proxies are incredible tools that can open a whole new world of data insights and online freedom for you. Managing that freedom and power with tact and moral forethought, however, should always be at the top of mind. Such usage ensures that you and everyone else enjoy the best online experience possible.

Wrapping Up

Mobile apps like WhatsApp have made instant messaging easier than ever these days. With modern technology shared the world over right at our fingertips, that should also mean accessing these types of platforms is even easier. Thankfully, a WhatsApp proxy is specifically designed to accomplish this.

We hope that you learned something new and informative about the importance of having WhatsApp proxies at your disposal. Keeping these tricks and ideas in mind as you stay connected with and around the world will enable you to enjoy the internet to the fullest. So, the next time you hear someone asking about WhatsApp proxies, you’ll be able to tell them exactly what’s up with them without missing a beat.

The information contained within this article, including information posted by official staff, guest-submitted material, message board postings, or other third-party material is presented solely for the purposes of education and furtherance of the knowledge of the reader.

All trademarks used in this publication are hereby acknowledged as the property of their respective owners.

 

How to launch a program or game through a proxy server

_Eret1k_ Anonymity 49.214

On the Internet, blogs and forums, you can often find questions of this type: It’s not really necessary with games, but in terms of anonymity, the question is quite interesting and relevant, since not all programs have the ability to go online and work through the proxy , and even more so through the socks5 proxy.

Before we move on to the proxy settings, it is advised to read the article “What is a proxy”, what are the types and why they are needed.

Running programs through a proxy

Since our site, in parallel with other topics, deals with the issues of anonymity on the network, I decided to write this article. In this article I will describe one of the ways to launch programs through a proxy using the Proxifier 9 program. 0011 .

First, download and install the program. Download Proxifier. To run programs through a proxy, you will not need the proxies themselves. You can find fresh, working proxies on this site. This is a good site, you can find a lot of interesting things there.

Configuring Proxifier

You are now ready to configure Proxifier. The first step is to set the settings for the proxy server (several or just one, depending on the need). In the menu, select the “Proxy Servers” tab in the “Profile” section.

In the window that appears, press the "Add" button

Enter the IP address of our proxy server, the port on which the server is running, the protocol version, and if the proxy server is a private password and login for access. For example, the proxies that we have chosen work using the SOCKS5 protocol on port 1080 and HTTP / HTTPS protocols on port 8080.

Having filled in all the necessary options, click "OK". At this stage, we can check their accuracy by clicking on the “Check . .” button after selecting a proxy server.

If we set everything up correctly, the test result should look like on the screenshot. Test 3 checks the speed of the server. Basically it will be disabled.

If the check was successful and the proxy server can be used, you only need to set the rules for which applications and which proxy server to work with. It is also possible to specify by default all traffic to pass through a proxy.

Rules can be set in Proxification Rules, in the Profile menu section.

By default, 2 rules are created:

  • Localhost — for computers in the local network, the rule defines operation without a proxy server (Direct).
  • Default - will direct all external traffic to the proxy server you have marked.

If you want, you can add your own rules. This can be done by clicking on the Add button, which will open the window for creating a new rule. The screenshot below is an example of a rule that should direct all Firefox browser traffic through a SOCKS5 proxy server.

Mandatory fields for creating a rule.

  • Name
  • Select a program or a list of programs for which it should be applied (Applications). You can select and add a program by clicking "Browse.."
  • Select a proxy server through which to direct traffic (Action).

There are actually many more settings, but this is the minimum set of settings you need to know. Everything else you can figure out yourself, poking around in the program.

Now you know how to use Proxifier . In the next article, I will tell you how to use other proxifiers and run programs through a proxy server. Also in the anonymity section you can find programs for working with proxy servers.

If you liked the article, click on the button of your social. networks! And don't forget to subscribe to our updates on VKontakte!

You might be interested to know:
Tribler + Tor = Anonymity on the BitTorrent network

VKontakte

Twitter

Facebook

OK

Telegram

WhatsApp

Viber

How to make Skype and proxy friends / Habr

All the best, Khabrovites! In the article I will tell you how to defeat this fucking Skype and make it work with Squid, but applicable to any http (s) proxy. We will use the latest skype. At the moment it is 7.40 and of course, with an emphasis on the fact that the next update will not break anything, and if it does, it will be necessary to tighten it up a bit, and not roll back the version. I must say right away that, in fact, the described method is a hack, because. the current skype cannot work with squid, well, or I didn’t manage to win, and I didn’t find a solution on the Internet that would take off for me. In general, about everything in order and.

tl;dr

Enable QoS via GPO on clients for processes Skype.exe and SkypeBrowserHost.exe , tell iptables to let through ToS-marked traffic, tell squid to let everyone on apps .skypeassets.com and mscrl.microsoft.com

So, my scenario is : all clients on Win7x64, AD DS 2008R2, Skype 7.40 x32, squid 2.7, proxy settings in IE arrive via GPO. To begin with, I’ll tell you why I needed this damn Skype so much. About half a year or a year ago, Skype 6th version died, the update to 7k did not help, well, ok, I transplanted users into the web version. Yes, it's buggy, but it's just that the text works quite well there, and voice / video can also be used on a personal smartphone if necessary. Not so long ago, there was a need to take and record interviews on Skype, and users got me. I had to give a laptop with a waffle and start to understand. It turned out that immediately "it", i.e. skype (euphemism) does not work anywhere if there is a proxy, and even full NAT wants it. Naturally, this does not happen, everything is set up, I immediately figured it out and decided to raise the topic again. I unfold, in the hope (what the hell is not joking), the last 7.40, I launch Skype and again I see this damn face with KDPV. A fairly long war with squid and google led to an interesting comment in which the author suggests using QoS. The idea is definitely good, but I didn’t take off from the box and had to finish it. As a result, the procedure is below.

Enable QoS for clients

Marking Skype packages. Open Group Policy and go to Computer Configuration - Policies - Windows Configuration - QoS based policy . We need a couple of rules for the Skype.exe and SkypeBrowserHost.exe processes. I think it's clear from the screenshot below.

DSCP 36 I took, in fact, from a flashlight, quite high, but not too high, yet our goal is not to maximize traffic prioritization for Skype, but to mark it. Next, do gpupdate on the client or reboot. You can check the correctness of the settings like this:

gpresult.exe /H d:\gpresult.html

In the received report, look for a mention of QoS

We say iptables to let tagged traffic

The GP specifies DSCP, and iptables operates ToS. Read more about QoS here. But in a nutshell, these values ​​differ by exactly 4 times. To get tos, multiply the DSCP value by 4 and get 144. The allow rule for transiting traffic with tos 144 from your subnet anywhere will look something like this:

iptables -I FORWARD 2 -s localnet/24 ​​-m tos --tos 144 -j ACCEPT

iptables will write tos as 0x90, i.e. in hex format. We select a victim for the test and try to go to Skype. On the gateway, you can see what is coming from the client, for example, through tcpdump

tcpdump -i eth0 -v host 192.168.0.71

we get something like

00:00:00.000001 IP (tos 0x90, ttl 128, id 13954, offset 0, flags [none], proto UDP (17), length 62)
192.168.0.71.20344 > 65.55.223.43.40012: UDP, length 34

tos 0x90 is what you need. It can be seen that a packet with the required flag came from the client. But skype still doesn't work.

We allow everyone to visit a couple of sites

The trick is that Skype looks in the IE settings. It is impossible to disable the use of proxies in this wonderful messenger (rays of good to those who came up with this). And we have proxy settings from the definition above that arrive in IE via GPO. In short, we add an allow rule for everyone to the squid to sites apps.skypeassets.com and mscrl.microsoft.com . Otherwise, I caught TCP_DENIED / 407 and skype did not connect. Well, somewhere like this:

#Options for Skype

acl for_skype dstdomain apps.skypeassets.com mscrl.microsoft.com
http_access allow for_skype

do not forget to reload the squid

Do not try to cheat, just change the IE GPO settings "Do not use a proxy server from addresses starting with:" for the mentioned addresses. A bunch of MS services will fall off. and web skype in the first place.

Again we go to test on the victim and get what we needed. Skype is connected, it works, you can write and call. Damn it :)

By the way , you may notice that there are options to play with the squid rules in order to somehow skip at least connecting to Skype, but this is not our method, at the key moment a failed call is critical for us.

How to deploy Skype over WSUS. Postscript, to the heap

I don’t know what MS was thinking, but Skype is not updated via WSUS, you can only install it from scratch once or update the version from exe. At what, it’s not that it’s not regularly updated, and even through LUP / WPP the version does not arrive in msi. Yes, I know that all versions of Skype have the same Product ID, but in the end I killed several hours trying to conjure with the rules. As a result, I looked at the online catalog of updates and found only (WAT!?) business version, I realized that this is a feature - to make Skype in msi, but not even distribute it and remove the possibility of automatic deployment altogether.


Learn more