[H-GEN] (Fwd) Help: How to anonymyse Squid Proxy Cache ?

Martin Pool mbp at linuxcare.com.au
Mon Jul 24 01:58:05 EDT 2000


On Mon, Jul 24, 2000 at 02:41:06PM +1000, Bruce Campbell wrote:

> On Mon, 24 Jul 2000, Andrew Bennett wrote:
> 
> a.benn> I'm running Squid 2.4 Devel on a Redhat 6.23 box to provide 
> a.benn> proxying services. 
> a.benn> 
> a.benn> Whilst I want most of the HTTP headers to be available to the 
> a.benn> requested servers, I'd like to make one of them in particular
> a.benn> (HTTP_X_FORWARDED_FOR) always come out the same, 
> a.benn> preferably the address of the proxy box itself. 
> a.benn> 
> a.benn> Unfortunately, having it as "unknown" is no good to me.
> 
> Use the source.  Squid's config file parsing is simple enough to add
> another option, specifically the contents of the X_Forwarded_For header.
> 
> Note that the above header describes the IP from which the request comes
> from to your proxy, and setting it to the proxy itself is not really a
> good idea.  (If you've got your squid on the outside of a firewall, the
> firewall IP would be a good choice).

It would be more "nice" to drop the header entirely rather than
passing it on if you don't want to disclose the address.  IMHO.

-- 
Martin Pool, Linuxcare, Inc.
+61 2 6262 8990
mbp at linuxcare.com, http://www.linuxcare.com/
Linuxcare. Support for the revolution.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://lists.humbug.org.au/pipermail/general/attachments/20000724/5f704e3e/attachment.sig>


More information about the General mailing list