Re: tproxy on freebsd

2007-04-23 Thread zen
Adrian Chadd wrote: I'm talking to someone about it who has some patches against -current. We'll see what can be done. Thankfully! The solution for FreeBSD looks doable without having to keep NAT state like TPROXY does.. Adrian just want to how's the progress regarding this issue. TIA

Re: tproxy on freebsd

2007-04-23 Thread zen
zen wrote: Adrian Chadd wrote: I'm talking to someone about it who has some patches against -current. We'll see what can be done. Thankfully! The solution for FreeBSD looks doable without having to keep NAT state like TPROXY does.. Adrian sorry double post just want to _Know_ how's

Re: tproxy on freebsd

2007-04-20 Thread Alexey Karagodov
real transparent proxy provided by Cisco's WCCP with, for example, Squid. this protocol detects HTTP (and so on) traffic on any port and redirects it to proxy-server. same thing (not just permanent redirection of port 80 to proxy but *DETECTING* HTTP traffic and proxying it) can be achived by

Re: Re: tproxy on freebsd

2007-04-18 Thread Volker
On 12/23/-58 20:59, zen wrote: i don't have a problem with this but i am going to be setting up a similar setup and would appreciate the help a working setup would provide. any help will be appreciated, i could use a sample configuration file regarding this problem. zen others, building a

Re: Re: tproxy on freebsd

2007-04-18 Thread Adrian Chadd
On 18/04/07, Volker [EMAIL PROTECTED] wrote: but with that configuration, still the proxy ip address that visible when my client using the proxy. Don't understand that sentence. What address is visible to whom? And which address do you want to 'hide'? If you don't want to leak your internal

Re: tproxy on freebsd

2007-04-18 Thread Volker
On 04/18/07 14:14, Adrian Chadd wrote: On 18/04/07, Volker [EMAIL PROTECTED] wrote: but with that configuration, still the proxy ip address that visible when my client using the proxy. Don't understand that sentence. What address is visible to whom? And which address do you want to

Re: tproxy on freebsd

2007-04-18 Thread jonathan michaels
On Wed, Apr 18, 2007 at 02:25:32PM +0200, Volker wrote: On 04/18/07 14:14, Adrian Chadd wrote: On 18/04/07, Volker [EMAIL PROTECTED] wrote: but with that configuration, still the proxy ip address that visible when my client using the proxy. Don't understand that sentence. What

Re: tproxy on freebsd

2007-04-18 Thread zen
Volker wrote: On 04/18/07 14:14, Adrian Chadd wrote: On 18/04/07, Volker [EMAIL PROTECTED] wrote: but with that configuration, still the proxy ip address that visible when my client using the proxy. Don't understand that sentence. What address is visible to whom? And which

Re: tproxy on freebsd

2007-04-18 Thread zen
Adrian Chadd wrote: A little birdie has told me that this mode of transparent client-spoofing is possible with FreeBSD with a little kernel hackery (much less than whats needed for TPROXY.) Maybe someone who knows the code better than I could comment on how difficult it'd be to add in

Re: tproxy on freebsd

2007-04-18 Thread Adrian Chadd
On 19/04/07, zen [EMAIL PROTECTED] wrote: if there is any such thing , i'm willing to be a tester . i will deploy it on my server and enviroment ( live one) I'm talking to someone about it who has some patches against -current. We'll see what can be done. Thankfully! The solution for FreeBSD

Re: tproxy on freebsd

2007-04-18 Thread zen
Adrian Chadd wrote: On 19/04/07, zen [EMAIL PROTECTED] wrote: if there is any such thing , i'm willing to be a tester . i will deploy it on my server and enviroment ( live one) I'm talking to someone about it who has some patches against -current. We'll see what can be done. i'm glad to

tproxy on freebsd

2007-04-17 Thread zen
hi, i know it seem out of topic, i recently build a proxy server to serve our small ISP, but i'm facing a big problem. as far as i know FreeBSD didn't support TPROXY like linux had. but i need to build this proxy transparently so only my client ips that visible when browsing. i use ipnat

Re: tproxy on freebsd

2007-04-17 Thread Max Laier
On Tuesday 17 April 2007 09:17, zen wrote: i know it seem out of topic, i recently build a proxy server to serve our small ISP, but i'm facing a big problem. as far as i know FreeBSD didn't support TPROXY like linux had. but i need to build this proxy transparently so only my client ips

Re: tproxy on freebsd

2007-04-17 Thread Peter Jeremy
On 2007-Apr-17 14:17:05 +0700, zen [EMAIL PROTECTED] wrote: does anyone has experience building a true transparent proxy with FreeBSD? please share the knowledge and the regarding this problems. Max beat me to answering but I use squid+IPfilter as a transparent proxy on my home firewall. The

Re: tproxy on freebsd

2007-04-17 Thread Alexander Kuprijanov
В сообщении от Tuesday 17 April 2007 11:17:05 zen написал(а): hi, i know it seem out of topic, i recently build a proxy server to serve our small ISP, but i'm facing a big problem. as far as i know FreeBSD didn't support TPROXY like linux had. but i need to build this proxy transparently so

Re: tproxy on freebsd

2007-04-17 Thread jonathan michaels
alexander, list, sorry for posting to list, i tried to post to advertised mail address and my post bounced as user unknown. so i try here. On Tue, Apr 17, 2007 at 09:29:21PM +0400, Alexander Kuprijanov wrote: ÷ ÓÏÏÂÝÅÎÉÉ ÏÔ Tuesday 17 April 2007 11:17:05 zen ÎÁÐÉÓÁÌ(Á): I use transparent

Re: tproxy on freebsd

2007-04-17 Thread zen
jonathan michaels wrote: alexander, list, sorry for posting to list, i tried to post to advertised mail address and my post bounced as user unknown. so i try here. On Tue, Apr 17, 2007 at 09:29:21PM +0400, Alexander Kuprijanov wrote: ÷ ÓÏÏÂÝÅÎÉÉ ÏÔ Tuesday 17 April 2007 11:17:05 zen

Re: tproxy on freebsd

2007-04-17 Thread jonathan michaels
On Wed, Apr 18, 2007 at 08:35:16AM +0700, zen wrote: jonathan michaels wrote: alexander, list, sorry for posting to list, i tried to post to advertised mail address and my post bounced as user unknown. so i try here. On Tue, Apr 17, 2007 at 09:29:21PM +0400, Alexander Kuprijanov wrote:

Re: tproxy on freebsd

2007-04-17 Thread zen
jonathan michaels wrote: On Wed, Apr 18, 2007 at 08:35:16AM +0700, zen wrote: jonathan michaels wrote: alexander, list, sorry for posting to list, i tried to post to advertised mail address and my post bounced as user unknown. so i try here. On Tue, Apr 17, 2007 at 09:29:21PM

Re: tproxy on freebsd

2007-04-17 Thread Adrian Chadd
On 18/04/07, zen [EMAIL PROTECTED] wrote: i think so, it work on most of linux machine depend on your linux kernel. here is the patch for the kernel : http://www.balabit.com/downloads/tproxy/ but if i cand choose linux or FreeBSD i preferred FreeBSD ( i'm a FreeBSD die hard user). that's why i