[Gllug] how to check for a transparent proxy

[Tethys]

Bruce Richardson writes:

>I know how transparent proxies work.  We were discussing the options for
>ip packet rewriting, if you look back.  Conventionally a transparent
>proxy makes itself invisible only to the client and the ip redirection
>happens on the client->proxy side.  What has been suggested is a further
>ip packet rewrite on the proxy->webserver side so that the webserver
>sees (and responds to) the client ip address rather than the proxy one.

Yes, it's possible (and I've seen it done). Plus, to be truly transparent,
it doesn't decrement TTL. In that situation, there really is virtually no
way to detect it's existence (although I suspect IP fingerprinting may get
you somewhere).

Tet

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug