I am running at home a proxy server setup designed to limit access to certain websites that I find produce a drag on my mental health (for very complex personal reasons totally off topic here), which I built using the Squid program. The setup works by having my main work computer connect to another one that runs Squid and for which I have purposefully arranged so that I do not have the root password, which instead belongs to trusted family members. This proxying computer is then connected to the Internet, and is specially reserved for my use only. However, and while I've been using it for a while now and it seems to block the intended sites fairly well, I note that it also keeps - very frequently, almost all the time - tripping anti-bot protection on sites guarded by things like Cloudflare, such as LinuxQuestions.org.
Now, I've been able to tolerate this as not much more than an annoyance, but it's never quite sat well with me because I don't know what it means security-wise, and can't find a lot of reports about this kind of thing while googling. Does this indicate that the server is misconfigured in some way? How? Could it make the system compromised? Could it cause web admins to think (even if not correctly) that I am some malicious agent looking to hack their site and thus get me in trouble at some point? Note that I had to enable the SSL Bump facilities given that most sites today use HTTPS, so that it can decrypt the HTTPS URLs and sniff them for relevant domains and keywords. I presume this makes the outgoing data somehow look like it comes from a bot or other malicious program due to the "man in the middle" nature of the SSL Bump system, but is that inevitable, or again, does it indicate I have done something wrong in configuring the proxying program?
(Note: I think the whole squid.conf
would be too large to post here.)
I've also found threads like this:
Why internet traffic behind ISP is not subject to captcha like a VPN?
which suggest this can occur with VPNs due to the NAT involved mapping many addresses to one, but here I am only mapping one internal address - as said, nobody else uses the proxied network.