Re: [squid-users] x-forwarded-for Fail

> HTML is a different story entirely from HTTP.
> Manipuation of HTTP headers on every relay point they cross is mandatory.

Why?

> >> One interesting case here is that if you add X-Forwarded-For on your
> >> requests, does that value show up at his end?
> > I did try setting it to 127.0.0.1, but it didn't fool him.
> >
> > Interestingly I run NoScript and have all scripting turned off for his
> > site, yet he still comes up with my IP. Hm, maybe Crumcast is narcking
> > me out.
>
> Probably. They do have to send packets from your IP to his IP and get
> the responses back to you.

In order to get back to me my IP is in the packet headers. No need for
them to be in http headers.

That's why you can (ostensibly) turn off x-forwarded-for in squid.conf.

-- 
http://www.fastmail.fm - Access all of your messages and folders
                          wherever you are