Re: [squid-users] Destination address rewriting for TPROXY

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Tue, 03 Dec 2013 17:01:04 +1300

On 3/12/2013 5:17 a.m., Steve Hill wrote:
>
> I'm using an ICAP reqmod service to change the URI of certain requests
> (including the host name). When running under a non-transparent proxy
> this works fine. However, when using TPROXY, Squid uses the original
> destination IP address of the connection rather than the Host header to
> determine where to connect to, so modifying the request doesn't cause
> Squid to actually connect to a different host.
>
> Is there any way to force Squid to connect to the host in the rewritten
> request, rather than continuing to connect to the original IP address?
>
> I'm aware of the "client_dst_passthru off" option, which sounds like it
> would almost do what I want, except the manual says that this option
> gets forced back on for requests that fail host verification.
>

Does the patch from http://bugs.squid-cache.org/show_bug.cgi?id=3589 fix
this for you?

Amos
Received on Tue Dec 03 2013 - 04:01:19 MST

This archive was generated by hypermail 2.2.0 : Tue Dec 03 2013 - 12:00:05 MST