[Gllug] how to check for a transparent proxy

Pete Ryland pdr at pdr.cx
Mon Dec 2 14:12:30 UTC 2002


On Mon, Dec 02, 2002 at 10:52:51AM +0000, itsbruce at uklinux.net wrote:
> On Mon, Dec 02, 2002 at 08:23:44AM +0000, rich at annexia.org wrote:
> > > This is contradictory.  If it is rewriting source addresses then the
> > > REMOTE_ADDR according to the web server WILL be the proxy's.
> > 
> > No, I meant it would rewrite source addresses on the way out.
> > Thus from the p.o.v. of the transparent proxy, the source address
> > 127.0.0.1 would be rewritten to the original source address.
> 
> Ah.  You mean that the transparent proxy will, having diverted an ip
> packet on the way out and processed it, rewrite the source header of the
> ip packet to contain the original sender address before sending it out?
> And then watch for all replies to that ip address and re-divert them?
> Um, no.  Not on any set-up I'm familiar with.

Ok, indeed, this is possible.  In fact, it wouldn't be that hard to set up
come to think of it.

Sorry for being misleading.

Pete

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list