Re: [squid-users] squid 2.6 + transparent + ipfw

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Sat, 08 Jul 2006 17:18:33 +0200

lör 2006-07-08 klockan 17:55 +0400 skrev Andrew Pantyukhin:

> FWIW, I was able to get the subj going by applying the
> following patch:
>
> http://people.freebsd.org/~sat/diffs/patch-src-client_side.c
>
> I'm sure there might be a better way, but the thing is ipfw
> doesn't change packet headers when forwarding packets.
> So we just need a placeholder clientNatLookup function that
> returns a success. I tested it with simple 'GET /' requests
> and it works

Do I understand you correctly that ipfw returns the real destination
address in getsockbyname()?

Do you know if there is a reasonable method to tell if this was a
intercepted connection or a normal connection?

Regards
Henrik

Received on Sat Jul 08 2006 - 09:18:37 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Aug 01 2006 - 12:00:01 MDT