Search squid archive

Re: Randomize outgoing_address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Andres Salazar escreveu:
Hello,

Is there anyway I can randomize my outgoing_address other then setting
up ACLs with time.

I have a box with a high load of IPs and I want my requests to go out
totally random.


squid has tcp_outgoing_address as you've already noticed. But i really dont think it can be used for acchieving 'totally random' outgoing address. If can choose outgoing address based on several thing, based on ACLs.

for a totally random output, i think you'll have an easier time using iptables SNAT rules .....

SNAT v1.3.5 options:
--to-source <ipaddr>[-<ipaddr>][:port-port]
                               Address to map source to.
                               (You can use this more than once)


   something as simplier as:

iptables -t nat -A POSTROUTING ........ -j SNAT --to-source x.x.x.10-x.x.x.200

   would randomize outgoing addresses ....

but be careful ... completly randomizing address outputs can (surely will) break things that uses source IP address as part of session security, just like internet banking and several other 'secure' systems.


--


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@xxxxxxxxxxxxxx
	My SPAMTRAP, do not email it






[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux