Re: [squid-users] source spoofing without tproxy?

2017-06-13 Thread David Kewley
t; wrote: > On 06/13/2017 02:41 PM, David Kewley wrote: > > > I will proceed assuming that squid will never support the sort of > > spoofing I was hoping for (since it would probably simplify things > > greatly for us), even though I believe in our design that spoofing would >

Re: [squid-users] source spoofing without tproxy?

2017-06-13 Thread David Kewley
On Tue, Jun 13, 2017 at 3:15 AM, Amos Jeffries wrote: > On 13/06/17 18:14, David Kewley wrote: > >> This might be of help if you are not already aware of the risks and >> issues involved with spoofing and handling of non-local IPs; < >> http://www.bcp38.info/> >

Re: [squid-users] source spoofing without tproxy?

2017-06-12 Thread David Kewley
Thanks for your reply, Amos. On Mon, Jun 12, 2017 at 9:50 PM, Amos Jeffries wrote: > On 13/06/17 13:48, David Kewley wrote: > >> I want my clients to explicitly address squid as a proxy (not use >> tproxy), but have squid spoof the source addresses in the forwarded >

[squid-users] source spoofing without tproxy?

2017-06-12 Thread David Kewley
I want my clients to explicitly address squid as a proxy (not use tproxy), but have squid spoof the source addresses in the forwarded connection, so that further hops know the original source address from the IPv4 headers. I could find no indication that anyone else has done this, and when I tried