[squid-users] Client IP spoofing via squid proxy

[Ambadas Hibare]

Hi Amos,

But in my requirement, the clients are configured with Squid IP & Port. Is there any possible way/approach by which I can make "Squid IP" hide towards web server?

sorry for typo, I meant squid IP

Regards,
Ambadas


-----Original Message-----
From: Amos Jeffries [mailto:squid3 at treenet.co.nz] 
Sent: 08 May 2015 21:32
To: Ambadas Hibare; squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Client IP spoofing via squid proxy

On 9/05/2015 1:56 a.m., Ambadas Hibare wrote:
> Hi Amos,
> 
> It's happening as you said:
> 
> the packets doing this:
>  client -----> Squid -SYN-> server
>  client <-------------ACK-- server
>  client -RST-> Squid 
> 
> There's a firewall in between squid & web server which is directly sending SYN-ACK to client instead of squid.
> 
> But in my requirement, the clients are configured with IP & Port. Is there any possible way/approach by which I can make client IP hide towards web server?
> 
> Any help appreciated


With Squid-3.4 or later:
 <http://www.squid-cache.org/Doc/config/spoof_client_ip/>

set it to "deny all"

Amos