From owner-freebsd-stable@FreeBSD.ORG Wed Apr 18 12:14:57 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 339A316A400 for ; Wed, 18 Apr 2007 12:14:57 +0000 (UTC) (envelope-from adrian.chadd@gmail.com) Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.245]) by mx1.freebsd.org (Postfix) with ESMTP id E648313C4C4 for ; Wed, 18 Apr 2007 12:14:56 +0000 (UTC) (envelope-from adrian.chadd@gmail.com) Received: by an-out-0708.google.com with SMTP id c24so162796ana for ; Wed, 18 Apr 2007 05:14:56 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=kCKyuakhwtRPCCZ/ICBS0lPlHOt3uX3V7Jn8XC8/+ojN7kMTtzKgLRraHAg36rXW2vmrGaSDx2WMUrAV+yCJZgPt51S4EUbSXi5oRGLwPGdCMCxXszJYtS0EKW2ja8jr5qA56p51wY5ttBxmqF2pGUIct5/2EyxIjva23gLRRm8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=OzrvScoGat5FSHD2iH8V3rjLCHRYabuXTFtIWtEfsy5PApd6rRBDrXlewkvuE3lP6pGc+yzFEazqVPm7JtecgJGBz9aDDYxt88dc9IhxaiPWd7mamvpxTujUqwGhPi0Lv6TETWhuzxmvrJUL7zm08+4jQp6ncMkZpIDLgrD53fA= Received: by 10.100.37.4 with SMTP id k4mr304591ank.1176898496493; Wed, 18 Apr 2007 05:14:56 -0700 (PDT) Received: by 10.100.197.3 with HTTP; Wed, 18 Apr 2007 05:14:56 -0700 (PDT) Message-ID: Date: Wed, 18 Apr 2007 20:14:56 +0800 From: "Adrian Chadd" Sender: adrian.chadd@gmail.com To: Volker In-Reply-To: <4626094C.20207@vwsoft.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <46247471.9030503@tk-pttuntex.com> <200704172129.22275.sanya-spb@list.ru> <20070418095903.12432@caamora.com.au> <462575D4.2010801@tk-pttuntex.com> <4626094C.20207@vwsoft.com> X-Google-Sender-Auth: cf4c365041818fc3 Cc: freebsd-stable@freebsd.org Subject: Re: Re: tproxy on freebsd X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Apr 2007 12:14:57 -0000 On 18/04/07, Volker wrote: > > but with that configuration, still the proxy ip address that visible > > when my client using the proxy. > > Don't understand that sentence. What address is visible to whom? And > which address do you want to 'hide'? If you don't want to leak your > internal addresses to any outside webserver, this is a squid issue > and there should (?) be configuration options for squid. > He means fully transparent - ie, client thinks its talking to the server; server thinks its talking to the client; proxy server IP isn't visible to either. Adrian -- Adrian Chadd - adrian@freebsd.org