[LARTC] Routed network + web-cache

[LARTC] Routed network + web-cache

[Nataniel Klug]

    Hello all,

    I have a small ISP and I work all my clients networks over a routed 
network (now I am using 201.35.16.0/24 and 200.140.222.128/25 for my 
clients).

    The gateway server of the ISP is capable of running a web-cache 
(only http) using squid but I dont want that my clients go to the 
internet with the proxy/cache IP. Like when they enter in this site 
www.meuip.com.br it shows only the proxy/gw server ip and not the client ip.

    There is some way to make this happens?

Att,

Nataniel Klug
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Routed network + web-cache

[Adorean Alexandru Raul]

Nataniel Klug wrote:
>    Hello all,
>
>    I have a small ISP and I work all my clients networks over a routed 
> network (now I am using 201.35.16.0/24 and 200.140.222.128/25 for my 
> clients).
>
>    The gateway server of the ISP is capable of running a web-cache 
> (only http) using squid but I dont want that my clients go to the 
> internet with the proxy/cache IP. Like when they enter in this site 
> www.meuip.com.br it shows only the proxy/gw server ip and not the 
> client ip.
>
>    There is some way to make this happens?
>
> Att,
>
> Nataniel Klug
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>
Yelow.
    From what i kow about squid it can't be done. You are stuck, becouse 
the proxy makes the request not the client thus you have proxy server ip.

    Some pages user a TCP header to recognise the ip behind the proxy 
server (X_FORWARDED_FOR i belive..)

Good luck,
Adorean Alexandru Raul
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Routed network + web-cache

[Luciano Ruete]

On Tuesday 25 July 2006 07:54, Nataniel Klug wrote:
>     Hello all,
>
>     I have a small ISP and I work all my clients networks over a routed
> network (now I am using 201.35.16.0/24 and 200.140.222.128/25 for my
> clients).
>
>     The gateway server of the ISP is capable of running a web-cache
> (only http) using squid but I dont want that my clients go to the
> internet with the proxy/cache IP. Like when they enter in this site
> www.meuip.com.br it shows only the proxy/gw server ip and not the client
> ip.
>
>     There is some way to make this happens?

yes, but you'll need a patched kernel, couse squid will need to bind non-local 
addresses.

See the squid FAQ about this, and folow de link in there:
http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.13
--
Luciano
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Routed network + web-cache

[Alexandre J. Correa - Onda Internet]

Nataniel,

www.balabit.com/downloads/tproxy/linux-2.6/

patch squid, kernel and iptables !!

Sds.

Alexandre J Correa
Onda Internet / OPinguim.net Webhosting
www.ondainternet.com.br
www.opinguim.net



Adorean Alexandru Raul wrote:
> Nataniel Klug wrote:
>>    Hello all,
>>
>>    I have a small ISP and I work all my clients networks over a routed 
>> network (now I am using 201.35.16.0/24 and 200.140.222.128/25 for my 
>> clients).
>>
>>    The gateway server of the ISP is capable of running a web-cache 
>> (only http) using squid but I dont want that my clients go to the 
>> internet with the proxy/cache IP. Like when they enter in this site 
>> www.meuip.com.br it shows only the proxy/gw server ip and not the 
>> client ip.
>>
>>    There is some way to make this happens?
>>
>> Att,
>>
>> Nataniel Klug
>> _______________________________________________
>> LARTC mailing list
>> LARTC@mailman.ds9a.nl
>> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>>
> Yelow.
>    From what i kow about squid it can't be done. You are stuck, becouse 
> the proxy makes the request not the client thus you have proxy server ip.
> 
>    Some pages user a TCP header to recognise the ip behind the proxy 
> server (X_FORWARDED_FOR i belive..)
> 
> Good luck,
> Adorean Alexandru Raul
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
> 
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc