Hi aldiones, A colleague and I tried this but on a slightly different setup. Although we had a shared IP for some of the domains (virtual hosts setup), we were afforded some more IPs to use for the other domains. We installed cgi-proxy on one of the unique IPs, say 195.10.1.50, but found out that it was resolving to the default server IP 195.10.1.10, which was the shared IP.
The script does not honor the IP used by the domain, but instead HTTP_HOST and/or SERVER_NAME variables will use or will bind to whatever IP that the machine or host will *reverse-lookup* to. In the same manner, and possibly all the more, virtual IPs will not be honored and will default to the main (and only) server IP. If there is a more direct (yet graceful) way of assigning the IP you want to these variables, then our problems are solved; otherwise, we deal with workarounds. Here are some ways to go around this. 1. For multiple domains and IP addresses setup, cgi-proxy creator James Marshall advised us once that we ought to make sure that the rDNS on each IP should resolve to each respective host name, and not to the same server host name (which you can do with the hosting company, or if you control your zones, set up corresponding entries for the hosts). 2. For multiple domains and single IP address setup, we think you'll need another script to handle tcp output, similar to how squid handles this through the tcp_outgoing_address directive. My colleague says that if squid is "paired with an acl that defines the incoming source address(s), this would, in effect, make squid listen and wait for any IP address that falls under the acl and then route the traffic to the designated outbound IP address as defined in tcp_outgoing_address." Caveat of the second approach is that your IP will be revealed easily because of limitations of squid. Cgi-proxy is still the better choice, albeit the need for more IPs. - jon aldiones wrote: > thanks guys. :) > > ako lng ipahibalo na dili ni para evil stuff. heheh :) > > naa lng nag ask sa ako kung possible ba ni sya. > > I also tried to find out some answers pero it seems na murag dili gyud > pwede. at least, in a very simple way i think. naa siguro pama-agi > pero i think dili na makaya sa akong powers. hehe :) > > salamat kaayo. > > pero kung naa pa diha uban mo share sa iyang thoughts ... please do. > highly appreciated kaayo. > > On 3/26/07, *joan* < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote: > > sa ako lang pagbanabana sa imong kaso; > > sa scenario na imong gidescribe...ang real IP gyud ang mogawas. > > sa imong question...dli possible na ang virtual IP sa domain ang > mogawas especially your using cgiproxy with that domain..hehe > remember its cgiproxy used in a particular domain. > > pwede ask...asa ni cya gamiton? > > well kung importante gyud try this... > > In hiding real IPs you need to have a good virtual software patch > and a strong engine para makaya niya ang traffic sa WHOLE > network ug daghan pa kaayo ang dapat nimong econsider.... > > kung kulang ra.....don't worry kay naa pay daghang pwedeng > makacontribute sa imong case dani sa list...hehe back to > snneeaakkiinngg..... > > */aldiones < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>/* wrote: > > Hello! > > Mga gurus, naa koy scenario na present. I would like to > request for your expertise or your thoughts kung > possible ba sya or dili. > > Mao ni ang scenario: > > Naay linux server assigned only with 1 real IP. Since mo host > man sya ug daghan na domains, nag himo ug pipila na virtual > IPs through IP Aliasing. > > One of the domains gi installan ug cgiproxy > <http://www.jmarshall.com/tools/cgiproxy/>. Kung ipa-agi sa > cgiproxy ang request to the whatismyip.com > <http://whatismyip.com/> site, ang mugawas na IP is ang ang > real IP sa server, dili ang virtual IP sa domain. > > Ang question: Naa bay way or is it even possible na instead na > ang real IP sa server ang ipakita, ang virtual IP sa domain > ang ipakita? Realistic ni sya? > > Through whatismyip.com <http://whatismyip.com/> akong > pagkahibalo sa IP sa machine. > > Salamat > > -- > Good design adds value faster than it adds cost. > _________________________________________________ > Kagay-Anon Linux Users' Group (KLUG) Mailing List > [email protected] <mailto:[email protected]> ( > http://cdo.linux.org.ph) > Searchable Archives: http://archives.free.net.ph > > > > > " Strength does not come from physical capacity. It comes from an > indomitable will. <http://www.quotationspage.com/quote/39936.html> > --*Mahatma Gandhi* " > > ------------------------------------------------------------------------ > Finding fabulous fares is fun. > Let Yahoo! FareChase search your favorite travel sites > > <http://farechase.yahoo.com/promo-generic-14795097;_ylc=X3oDMTFtNW45amVpBF9TAzk3NDA3NTg5BF9zAzI3MTk0ODEEcG9zAzEEc2VjA21haWx0YWdsaW5lBHNsawNxMS0wNw--%0A> > to find flight and hotel bargains. > _________________________________________________ > Kagay-Anon Linux Users' Group (KLUG) Mailing List > [email protected] <mailto:[email protected]> ( > http://cdo.linux.org.ph) > Searchable Archives: http://archives.free.net.ph > > > > > -- > Good design adds value faster than it adds cost. > ------------------------------------------------------------------------ > > _________________________________________________ > Kagay-Anon Linux Users' Group (KLUG) Mailing List > [email protected] (http://cdo.linux.org.ph) > Searchable Archives: http://archives.free.net.ph _________________________________________________ Kagay-Anon Linux Users' Group (KLUG) Mailing List [email protected] (http://cdo.linux.org.ph) Searchable Archives: http://archives.free.net.ph
