On Fri, 13 Dec 2002 10:56, Walter Hofmann wrote: > Yet another idea: If you always use a proxy, then set http_proxy to > something like http://123.45.67.89:12345 and use iptables to redirect > all outgoing connections to the proxy instead of 123.45.67.89:12345. > This allows you to switch proxies on the fly without restarting the > programs that use the proxy when it changes. (Extending this idea so > that you can completely switch off the proxy is left as an exercise...)
Masquerading of packets originating at the local machine was a new feature added in 2.4.20, so this only works if you are tracking the latest kernels. Also use a reserved private address such as 10.x.x.x. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/ Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page