Re: [squid-users] TPROXY

From: Hasanen AL-Bana <hasanen_at_gmail.com>
Date: Fri, 31 Dec 2010 11:09:28 +0300

I believe you need to setup a bridge to see if traffic goes through...

[Clinet]---->[ eth1 -- TProxy Bridge-- eth0 ] -----> [Gateway]
------Internet --------> Web server

Your client must be able to reach internet without any special configuration.

The webserver on the internet must log your client IP address , NOT
your squid IP. this way you make sure that TPROXY is really spoofing
http request ip.

you must always keep watching access.log to see what's going on.

On Fri, Dec 31, 2010 at 10:34 AM, benjamin fernandis
<benjo11111_at_gmail.com> wrote:
> Hi Friends,
>
> I �setup tproxy on rhel 5.5 with 2.36.2 kernel and iptables 1.4.9 with
> squid 3.1.8.rpm
>
> So please now suggest me how to i test my fully tproxxy setup.
>
> Thanks,
> Benjo
>
Received on Fri Dec 31 2010 - 08:09:55 MST

This archive was generated by hypermail 2.2.0 : Fri Dec 31 2010 - 12:00:04 MST