using tcp_outgoing_address it is very much possible and then postrouting chain
in linux will be helpful.

There may be limitations about number of tcp_outgoing_address entries.

The best part of this method is that all cached content can be served to
clients at max speeds where as htp+imq could be used to serve at limited
bandwidth.

Regards,

Cyberdude Murli

---------- Original Message -----------
From: "hare ram" <[EMAIL PROTECTED]>
To: "Henrik Nordstrom" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Mon, 8 Mar 2004 12:28:41 +0530
Subject: Re: [squid-users] Squid+ip spoofing

> Hi Henrik
> 
> thanks for the reply
> 
> Since all my clients are using Valid IP
> and i dont want them to NAT
> so iam trying to deploy the ip-spoofing with the squid
> if the squid has a content, its fetch from squid
> if not its get it from orginalserver
> 
> but most of the time on server side if i monitor,iam getting squid 
> ip rather client, how can resolve this problem
> 
> hare
> ----- Original Message ----- 
> From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
> To: "hare ram" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Friday, March 05, 2004 6:49 PM
> Subject: Re: [squid-users] Squid+ip spoofing
> 
> > On Fri, 5 Mar 2004, hare ram wrote:
> >
> > > so ther destination Server will see the  Client IP.,
> > > instead of cache Server IP
> > >
> > > is this possible with the same with Squid
> >
> > Yes and no.
> >
> > The main problem is that few if any OS where Squid runs support this type
> > of IP spoofing, but there is ways around.
> >
> > a) You can use tcp_outgoing_address + NAT. For each client IP have Squid
> > assigne a unique source IP address with tcp_outgoing_address, and then NAT
> > these to the real client IP.
> >
> > b) The TPROXY extension to Linux. There is even a Squid patch for using
> > this but it is not entirely up to date and requires some work.
> >
> >
> > Regards
> > Henrik
> >
> >
------- End of Original Message -------

Reply via email to