On Wed, 22 Dec 2004, Lucia Di Occhi wrote:
> I had forgotten to mention I am using Transparent Mode.
Transparent interception is evil.
If you absolutely MUST transparently intercept the client traffic then I
highly recommend to NAT all traffic (proxied and direct) to the same IP
address. If not you will certainly run into login and/or session problems
with numerous web sites.
In addition you should expect things will break with MSIE and other
advanced browsers from time to time in combination with transparent
interception. In such configurations the browsers rightfully assume there
is no proxy in the request chain as they have not been configured to use
one, but then the interception violates the fundamentals of TCP/IP making
the browsers assumptions fail badly.
But most often the causes to problems is web sites which is overly
sensitive to the source IP address of the client. Not sure if this is the
case for MSN at the moment.
Regards
Henrik
Received on Wed Dec 22 2004 - 16:28:55 MST
This archive was generated by hypermail pre-2.1.9 : Sat Jan 01 2005 - 12:00:02 MST