tproxy on freebsd

[zen]

Volker wrote:

>On 04/18/07 14:14, Adrian Chadd wrote:
>  
>
>>On 18/04/07, Volker <volker at vwsoft.com> wrote:
>>
>>    
>>
>>>>but with that configuration, still the proxy ip address that visible
>>>>when my client using the proxy.
>>>>        
>>>>
>>>Don't understand that sentence. What address is visible to whom? And
>>>which address do you want to 'hide'? If you don't want to leak your
>>>internal addresses to any outside webserver, this is a squid issue
>>>and there should (?) be configuration options for squid.
>>>
>>>      
>>>
>>He means fully transparent - ie, client thinks its talking to the
>>server; server thinks its talking to the client; proxy server IP isn't
>>visible to either.
>>
>>
>>
>>Adrian
>>
>>    
>>
>
>Adrian,
>
>thanks, I got it.
>
>Talking about real transparent proxy not just a transparent one... ;)
>
>Unfortunately I don't have a solution for that as I'm using mostly
>NATed environments and it doesn't make sense to hand out private
>address space to a web server.
>
>  
>
well actualy is not private address, i work for small ISP and the proxy 
supose to be caching all our clients requests.
and it supose to be that our clients ip is visible to the server, not 
our proxy.
i wish FreeBSD have solutions for this,
just hate to discovered the "weakness" of FreeBSD.
and most of all i hate to switch to other OS.


>Volker
>_______________________________________________
>freebsd-stable at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-stable
>To unsubscribe, send any mail to "freebsd-stable-unsubscribe at freebsd.org"
>
>  
>
TIA

Zen