[squid-users] Block WebRTC Leak using Squid

[Amos Jeffries]

On 25/08/17 14:00, Sekar Duraisamy wrote:
> Thanks Amos, Can i use the above configuration even though I am using
> tcp_outgoing_address in the squid conf?
> 
> I want to make visible only tcp_outgoing_address only visible to
> outside and not real client IP.
> 

The second set of directives to hide the client will work.

The first set to hide the proxy are kind of pointless when using a 
proxy-specific IP address / identifier on all traffic out of the proxy.

Amos


> On Fri, Aug 25, 2017 at 4:11 AM, Amos Jeffries wrote:
>> On 25/08/17 03:21, Sekar Duraisamy wrote:
>>>
>>> I am using http_port 3128 ( direct proxy )
>>>
>>
>> Then:
>>
>>   # to hide the proxy
>>   via off
>>   forwarded_for transparent
>>
>>   # to hide the client
>>   via on
>>   forwarded_for delete
>>   request_header_access User-Agent deny all
>>
>>
>> As you may be able to tell from those you cannot hide both at once.
>>
>> Amos
>>
>> _______________________________________________
>> squid-users mailing list
>> squid-users at lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-users