Re: [squid-users] show ips going outside squid

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 27 May 2005 07:07:09 +0200 (CEST)

On Thu, 26 May 2005, Matus UHLAR - fantomas wrote:

> I'm afraid there's nothing like reverse intercepting proxy although it's
> possible to do it. Maybe some hardware proxying solutions...

There is the TPROXY patch for Linux.

Another option is tcp_outgoing_address combined with NAT outside the
proxy. Set up one private tcp_outgoing_address per client IP and then NAT
these to the real client IP before the traffic leaves your network.

Both has very strict requirements on your networking setup as all return
traffic must go via the proxy even if the destination IP is the client IP.

Regards
Henrik
Received on Thu May 26 2005 - 23:07:10 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:03 MDT