Request Header Filter

Allows to spoof HTTP request headers. Headers may be deleted, or replaced with a fixed or random value.

Parameters

header

One or more header parameters specify header names and action to be taken.

Format:

header = header_name:delete
header = header_name:replace:value
header = header_name:random

See also Common Filter Parameters.

If random is specified, a random string is generated. A few important headers are trated specially:

The table below gives some examples:

Header Examples
User-Agent Arpfmq/3.2
MTR/1.1
Lnewpf/2.0
Referer http://www.qlkduyp.com/
http://olaer.alsdjkfh.org/pigawlj.html
http://87.136.228.72/pdgswu/enoaenms.asp
X-Forwarded-For 190.26.137.20
35.201.48.126
212.79.42.69
Other headers lsapjhiopk
pnmwwwqkiptjcye
mqpftbnxcwbdpmue

Replacing Referer breaks a few (lame) sites that use this header to see where the user came from. Replacing User-Agent breaks even more (equally stupid) sites that generate different HTML depending on the browser you are using. Some of them go berserk if they see something unexpected (instead of generating some basic HTML undersood by any browser). For example, with random User-Agent IE enters endless redirection loop when pointed to Canadian Tire website. Add those fragile sites to your filters ' exception lists.

For more information on HTTP request headers see RFC 2068. Note that X-Forwarded-For is not a standard header but is implemented by many popular proxy servers (e.g. Squid).

Example

type = Request Header Filter
name = Privacy Protector
enabled = true
logging = false
include = *
exclude = puretracks.com
header = Referer:random
header = X-Forwarded-For:random

type = Request Header Filter
name = Spoof User-Agent
enabled = true
logging = false
include = *
header = User-Agent:replace:Mozilla/4.0 (MSIE 6.0)