[squid-users] Block WebRTC Leak using Squid

[Eliezer Croitoru]

I remembered something so please also try:
http://ngtech.co.il/ip.php

and compare it to the output of:
http://myip.net.il/

and please let us know what browsers have you tested this with.

Eliezer

----
Eliezer Croitoru
Linux System Administrator
Mobile: +972-5-28704261
Email: eliezer at ngtech.co.il



-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Sekar Duraisamy
Sent: Monday, August 28, 2017 09:26
To: Amos Jeffries <squid3 at treenet.co.nz>
Cc: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Block WebRTC Leak using Squid

Hi,

I have tried the below.

via on
forwarded_for delete
visible_hostname localhost
request_header_access User-Agent deny all

But still I am able to see original client local IP address and Client
Public IP address instead of tcp_outgoing_address as original client
IP.

Am i missed anything here?

On Fri, Aug 25, 2017 at 2:11 PM, Amos Jeffries <squid3 at treenet.co.nz> wrote:
> On 25/08/17 14:00, Sekar Duraisamy wrote:
>>
>> Thanks Amos, Can i use the above configuration even though I am using
>> tcp_outgoing_address in the squid conf?
>>
>> I want to make visible only tcp_outgoing_address only visible to
>> outside and not real client IP.
>>
>
> The second set of directives to hide the client will work.
>
> The first set to hide the proxy are kind of pointless when using a
> proxy-specific IP address / identifier on all traffic out of the proxy.
>
> Amos
>
>
>
>> On Fri, Aug 25, 2017 at 4:11 AM, Amos Jeffries wrote:
>>>
>>> On 25/08/17 03:21, Sekar Duraisamy wrote:
>>>>
>>>>
>>>> I am using http_port 3128 ( direct proxy )
>>>>
>>>
>>> Then:
>>>
>>>   # to hide the proxy
>>>   via off
>>>   forwarded_for transparent
>>>
>>>   # to hide the client
>>>   via on
>>>   forwarded_for delete
>>>   request_header_access User-Agent deny all
>>>
>>>
>>> As you may be able to tell from those you cannot hide both at once.
>>>
>>> Amos
>>>
>>> _______________________________________________
>>> squid-users mailing list
>>> squid-users at lists.squid-cache.org
>>> http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users