Re: [squid-users] Squid+ip spoofing

Hi Henrik

thanks for the reply

Since all my clients are using Valid IP
and i dont want them to NAT
so iam trying to deploy the ip-spoofing with the squid
if the squid has a content, its fetch from squid
if not its get it from orginalserver

but most of the time on server side if i monitor,iam getting squid ip rather
client, how can resolve this problem

hare
----- Original Message -----
From: "Henrik Nordstrom" <hno@squid-cache.org>
To: "hare ram" <hareram@sol.net.in>
Cc: <squid-users@squid-cache.org>
Sent: Friday, March 05, 2004 6:49 PM
Subject: Re: [squid-users] Squid+ip spoofing

> On Fri, 5 Mar 2004, hare ram wrote:
>
> > so ther destination Server will see the Client IP.,
> > instead of cache Server IP
> >
> > is this possible with the same with Squid
>
> Yes and no.
>
> The main problem is that few if any OS where Squid runs support this type
> of IP spoofing, but there is ways around.
>
> a) You can use tcp_outgoing_address + NAT. For each client IP have Squid
> assigne a unique source IP address with tcp_outgoing_address, and then NAT
> these to the real client IP.
>
> b) The TPROXY extension to Linux. There is even a Squid patch for using
> this but it is not entirely up to date and requires some work.
>
>
> Regards
> Henrik
>
>
Received on Mon Mar 08 2004 - 00:05:01 MST