[H-GEN] (Fwd) Help: How to anonymyse Squid Proxy Cache ?
Martin Pool
mbp at linuxcare.com.au
Mon Jul 24 01:58:05 EDT 2000
On Mon, Jul 24, 2000 at 02:41:06PM +1000, Bruce Campbell wrote:
> On Mon, 24 Jul 2000, Andrew Bennett wrote:
>
> a.benn> I'm running Squid 2.4 Devel on a Redhat 6.23 box to provide
> a.benn> proxying services.
> a.benn>
> a.benn> Whilst I want most of the HTTP headers to be available to the
> a.benn> requested servers, I'd like to make one of them in particular
> a.benn> (HTTP_X_FORWARDED_FOR) always come out the same,
> a.benn> preferably the address of the proxy box itself.
> a.benn>
> a.benn> Unfortunately, having it as "unknown" is no good to me.
>
> Use the source. Squid's config file parsing is simple enough to add
> another option, specifically the contents of the X_Forwarded_For header.
>
> Note that the above header describes the IP from which the request comes
> from to your proxy, and setting it to the proxy itself is not really a
> good idea. (If you've got your squid on the outside of a firewall, the
> firewall IP would be a good choice).
It would be more "nice" to drop the header entirely rather than
passing it on if you don't want to disclose the address. IMHO.
--
Martin Pool, Linuxcare, Inc.
+61 2 6262 8990
mbp at linuxcare.com, http://www.linuxcare.com/
Linuxcare. Support for the revolution.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://lists.humbug.org.au/pipermail/general/attachments/20000724/5f704e3e/attachment.sig>
More information about the General
mailing list