Re: [squid-users] Pass the IP?

detariael_at_aol.com wrote:
> Hi everyone,
>
> I was talking to my ISP admin another day. We have our network
> configured in a way that we get external public IP for everyone for
> every port except for port 80, because he's got Squid set there to cache
> the pages and speed it up. He says we can't get public IP's on port 80,
> because all the traffic goes through Squid and it changes the IP.
>
> Is there a way to configure Squid that:
> 1.) it still works as a cache;
> 2.) it won't change the IP of the user as he surfs the page.
>
> If so, I'd be glad if someone could point it out, so I could forward it
> to my admin. I just hate going to sites and seeing that my IP is in some
> blacklist due to someone in my network doing some bad things (or rather,
> some malicious software doing it for them without them even knowing). I
> already have public IP - please help me get it on port 80 as well.

The easy way:
  Get your admin to enable Via and X-Forwarded-For headers. Most
blacklists I know of use them to determine the true IP behind a proxy.
  http://wiki.squid-cache.org/SquidFaq/SecurityPitfalls

The hard way:
   Tproxy IP address spoofing.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14
   Current Beta Squid 3.1.0.7