[Gllug] how to check for a transparent proxy

[Bruce Richardson]

On Wed, Dec 04, 2002 at 08:47:38AM +1300, Jonathan wrote:
> On Wednesday 04 Dec 2002 7:28 am, itsbruce at uklinux.net wrote:
> > Now, what has been suggested is an extra rewrite on the way out of the
> > gateway box, so that the ip packets sent from the proxy application on
> > the gateway box to the remote webserver have the source header rewritten
> > to contain the ip address of the original client machine.  
> 
> I'm no expert but...
> 
> Wouldn't that more-or-less require all the client boxes to have a static, real 
> IP address (not just a Class A/B/C address)? That would be impractical for a 
> large (eg. University) LAN. I suppose IP6 128 bit IP addresses are designed 
> to solve this problem?

Of course: if you have NAT, there's no point.  But then this started as
a discussion of ISP proxies.

-- 
Bruce

If the universe were simple enough to be understood, we would be too
simple to understand it.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 261 bytes
Desc: not available
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20021204/e4a326da/attachment.pgp>