Hi Amos, But in my requirement, the clients are configured with Squid IP & Port. Is there any possible way/approach by which I can make "Squid IP" hide towards web server? sorry for typo, I meant squid IP Regards, Ambadas -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: 08 May 2015 21:32 To: Ambadas Hibare; squid-users@xxxxxxxxxxxxxxxxxxxxx Subject: Re: Client IP spoofing via squid proxy On 9/05/2015 1:56 a.m., Ambadas Hibare wrote: > Hi Amos, > > It's happening as you said: > > the packets doing this: > client -----> Squid -SYN-> server > client <-------------ACK-- server > client -RST-> Squid > > There's a firewall in between squid & web server which is directly sending SYN-ACK to client instead of squid. > > But in my requirement, the clients are configured with IP & Port. Is there any possible way/approach by which I can make client IP hide towards web server? > > Any help appreciated With Squid-3.4 or later: <http://www.squid-cache.org/Doc/config/spoof_client_ip/> set it to "deny all" Amos _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
