<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72" style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt'>Hey Ahmad,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>To be clear, a simple forward proxy that will fake the source IP address is kind of a simple task with these days libraries.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I do not know your exact scenario and use case but it’s possible to write such a proxy in roughly 200 lines of code in Golang.<br>Take a peek at:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><a href="https://github.com/LiamHaworth/go-tproxy">https://github.com/LiamHaworth/go-tproxy</a><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>It’s a nice library for tproxy alone.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Squid is great but if you will touch any source code it’s possible that you’d better write your own customized proxy.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Good Luck,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Eliezer<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt'>----<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Eliezer Croitoru<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>NgTech, Tech Support<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Mobile: +972-5-28704261<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Email: <a href="mailto:ngtech1ltd@gmail.com"><span style='color:blue'>ngtech1ltd@gmail.com</span></a><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt'>From:</span></b><span style='font-size:11.0pt'> Ahmad Alzaeem <0xff1f@gmail.com> <br><b>Sent:</b> Friday, May 13, 2022 18:34<br><b>To:</b> Eliezer Croitoru <ngtech1ltd@gmail.com>; squid-users@lists.squid-cache.org<br><b>Subject:</b> Re: [squid-users] is there a way to tell squid to write external ip even that external ip not attached into the machine ?<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:11.0pt'>Hello <span style='color:black'>Eliezer</span><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>I thought it could be done by editing squid src file like to skip inet address lookup .<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Thanks <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><o:p> </o:p></span></p><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:12.0pt;color:black'>From: </span></b><span style='font-size:12.0pt;color:black'>squid-users <<a href="mailto:squid-users-bounces@lists.squid-cache.org">squid-users-bounces@lists.squid-cache.org</a>> on behalf of Eliezer Croitoru <<a href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a>><br><b>Date: </b>Friday, May 13, 2022 at 8:21 AM<br><b>To: </b><a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a> <<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>><br><b>Subject: </b>Re: [squid-users] is there a way to tell squid to write external ip even that external ip not attached into the machine ?<o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt'>Hey Ahmad,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>You should use a tproxy port with a PROXY protocol support and acls.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>With these you can try to push traffic to the network from a local process that will write the right details to squid that will generate a fake source ip.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'><br>And since you have asked I assume you are not familiar enough with this kind of setup so it’s crucial you will understand what are doing<br>before trying and testing it since at might not work as you expect.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>All The Bests,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Eliezer<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:11.0pt'>----<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Eliezer Croitoru<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>NgTech, Tech Support<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Mobile: +972-5-28704261<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Email: <a href="mailto:ngtech1ltd@gmail.com"><span style='color:blue'>ngtech1ltd@gmail.com</span></a><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:11.0pt'>From:</span></b><span style='font-size:11.0pt'> squid-users <<a href="mailto:squid-users-bounces@lists.squid-cache.org">squid-users-bounces@lists.squid-cache.org</a>> <b>On Behalf Of </b>Ahmad Alzaeem<br><b>Sent:</b> Friday, May 13, 2022 16:13<br><b>To:</b> <a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>; Amos Jeffries <<a href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a>><br><b>Subject:</b> [squid-users] is there a way to tell squid to write external ip even that external ip not attached into the machine ?<o:p></o:p></span></p></div></div><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Hello Guys ,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>We are testing squid with a project such as we need squid to write and proceed with tcp_outgoing address address even its not attached to the machine by ifconfig or ip add ?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>After some tests we found that squid wont write the external Ip to be pushed out the network card interface if the ip address is not added to the machine .<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Is there anyway to bypass this checkout and let squid ignore checking the external ips if attached or not attached ?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Not sure if from config or may be editing src files .<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'>Many Thanks <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt'> <o:p></o:p></span></p></div></body></html>