Search squid archive

Re: Squid - Not replace source IP address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>> Transparent is a good word but it means something completely different:
>>
>>   A "transparent proxy" is a proxy that does not modify the request or
>>   response beyond what is required for proxy authentication and
>>   identification.
>>
>> This is a citation from RFC2616 which defines the HTTP protocol. Since we
>> are talking about HTTP protocol, we should use words as they are defined
>> there, otherwise it could lead to misunderstandings.

On 10.08.09 12:06, Leonardo Rodrigues wrote:
>    proxies working on so-called 'transparent' fashion do not alter  
> requests and responses, thus acchieving what RFC2616 says. It's true  
> they alter source IP addresses ... but that is not quoted on RFC2616.
>
>    So it's a matter of interpretation .... the highlighted quote, in my  
> opinion, does not prohibite a proxy to alter the source IP address, as  
> long the request and the responde is keep intact.
>
>    That way, the so-called 'transparent' proxy setup is completly  
> RFC-2616 compliant.

I don't object about RFC compliancy. I'm just saying that proxy
configured in browser and not set up to intercept connections is transparent
if it does not alter the content.

what many people mean by "transparent" proxy is really an "intercepting"
proxy. Sadly, the option for processing intercepted connections was named
"transparent" in squid which makes it also unclear.
-- 
Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers. 

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux