Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Apr 2007 08:45:40 +0700
From:      zen <zen@tk-pttuntex.com>
To:        Volker <volker@vwsoft.com>
Cc:        Adrian Chadd <adrian@freebsd.org>, freebsd-stable@freebsd.org
Subject:   Re: tproxy on freebsd
Message-ID:  <4626C9C4.8080109@tk-pttuntex.com>
In-Reply-To: <46260E3C.4090408@vwsoft.com>
References:  <46247471.9030503@tk-pttuntex.com>		<200704172129.22275.sanya-spb@list.ru>		<20070418095903.12432@caamora.com.au>		<462575D4.2010801@tk-pttuntex.com> <4626094C.20207@vwsoft.com>	<d763ac660704180514w3fc0ed98nff7f4d57a8dca9b1@mail.gmail.com> <46260E3C.4090408@vwsoft.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Volker wrote:

>On 04/18/07 14:14, Adrian Chadd wrote:
>  
>
>>On 18/04/07, Volker <volker@vwsoft.com> wrote:
>>
>>    
>>
>>>>but with that configuration, still the proxy ip address that visible
>>>>when my client using the proxy.
>>>>        
>>>>
>>>Don't understand that sentence. What address is visible to whom? And
>>>which address do you want to 'hide'? If you don't want to leak your
>>>internal addresses to any outside webserver, this is a squid issue
>>>and there should (?) be configuration options for squid.
>>>
>>>      
>>>
>>He means fully transparent - ie, client thinks its talking to the
>>server; server thinks its talking to the client; proxy server IP isn't
>>visible to either.
>>
>>
>>
>>Adrian
>>
>>    
>>
>
>Adrian,
>
>thanks, I got it.
>
>Talking about real transparent proxy not just a transparent one... ;)
>
>Unfortunately I don't have a solution for that as I'm using mostly
>NATed environments and it doesn't make sense to hand out private
>address space to a web server.
>
>  
>
well actualy is not private address, i work for small ISP and the proxy 
supose to be caching all our clients requests.
and it supose to be that our clients ip is visible to the server, not 
our proxy.
i wish FreeBSD have solutions for this,
just hate to discovered the "weakness" of FreeBSD.
and most of all i hate to switch to other OS.


>Volker
>_______________________________________________
>freebsd-stable@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-stable
>To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"
>
>  
>
TIA

Zen



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4626C9C4.8080109>