Re: [squid-users] Client IP spoofing via squid proxy

2015-05-11 Thread Amos Jeffries
On 11/05/2015 11:27 p.m., Ambadas Hibare wrote: > Hi, > > The problem is many clients are already preconfigured with proxy ip/port > settings due to previous setup. > huh? your "problem" is that clients are setup correctly? TPROXY and NAT interception (aka. hjacking attack on users) are the *h

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-11 Thread Ambadas Hibare
ssage- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: 11 May 2015 16:01 To: Ambadas Hibare; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Client IP spoofing via squid proxy On 11/05/2015 5:56 p.m., Ambadas Hibare wrote: > Hi Amos, > > But in my requirement, t

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-11 Thread Yuri Voinov
I think, this is requirement for invisible proxy, Amos 11.05.15 16:30, Amos Jeffries пишет: On 11/05/2015 5:56 p.m., Ambadas Hibare wrote: Hi Amos, But in my requirement, the clients are configured with Squid IP & Port. Is there any possible way/approach by which I can make "Squid IP" hide to

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-11 Thread Amos Jeffries
On 11/05/2015 5:56 p.m., Ambadas Hibare wrote: > Hi Amos, > > But in my requirement, the clients are configured with Squid IP & Port. Is > there any possible way/approach by which I can make "Squid IP" hide towards > web server? > No. Hiding the Squid IP in the TCP/IP layers without full TPROX

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-10 Thread Ambadas Hibare
es [mailto:squ...@treenet.co.nz] Sent: 08 May 2015 21:32 To: Ambadas Hibare; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Client IP spoofing via squid proxy On 9/05/2015 1:56 a.m., Ambadas Hibare wrote: > Hi Amos, > > It's happening as you said: > > the packets doing

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-08 Thread Amos Jeffries
On 9/05/2015 1:56 a.m., Ambadas Hibare wrote: > Hi Amos, > > It's happening as you said: > > the packets doing this: > client -> Squid -SYN-> server > client <-ACK-- server > client -RST-> Squid > > There's a firewall in between squid & web server which is directly sending >

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-08 Thread Ambadas Hibare
8:08 To: Ambadas Hibare; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Client IP spoofing via squid proxy On 7/05/2015 6:09 p.m., Ambadas Hibare wrote: > HI, > > Client IP: 172.16.5.110 > Client Mac: 00:23:7D:E8:AC:C4 > > Squid Box: > > eth0 IP: 172.16.5.102

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-07 Thread Amos Jeffries
On 7/05/2015 6:09 p.m., Ambadas Hibare wrote: > HI, > > Client IP: 172.16.5.110 > Client Mac: 00:23:7D:E8:AC:C4 > > Squid Box: > > eth0 IP: 172.16.5.102 > eth0 Mac: 18:A9:05:3C:12:E4 > > eth1 IP: 10.0.0.102 > eth1 Mac: 18:A9:05:3C:12:E6 > >> "Your "ip route" rules use eth1, but your rp_filter

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-06 Thread Ambadas Hibare
Sent: 07 May 2015 11:05 To: Ambadas Hibare; squid-users@lists.squid-cache.org Subject: Re: [squid-users] Client IP spoofing via squid proxy On 7/05/2015 4:59 p.m., Ambadas Hibare wrote: > Hi, > > Thanks for replying. > > I did a full transparent tproxy setup for squid proxy on linux(RHEL

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-06 Thread Amos Jeffries
On 7/05/2015 4:59 p.m., Ambadas Hibare wrote: > Hi, > > Thanks for replying. > > I did a full transparent tproxy setup for squid proxy on linux(RHEL 6) > machine as below: > > Version: squid-3.5.1 > configure options: '--enable-follow-x-forwarded-for' > '--enable-linux-netfilter' --enable-ltd

[squid-users] Client IP spoofing via squid proxy

2015-05-06 Thread Ambadas Hibare
sts.squid-cache.org Subject: Re: [squid-users] Client IP spoofing via squid proxy On 6/05/2015 2:25 a.m., Ambadas Hibare wrote: > Hi, > > I trying to spoof client IP via squid proxy by following squid's > TPROXY4 wiki page: http://wiki.squid-cache.org/Features/Tproxy4 > &g

Re: [squid-users] Client IP spoofing via squid proxy

2015-05-05 Thread Amos Jeffries
On 6/05/2015 2:25 a.m., Ambadas Hibare wrote: > Hi, > > I trying to spoof client IP via squid proxy by following squid's > TPROXY4 wiki page: http://wiki.squid-cache.org/Features/Tproxy4 > > But I want to know whether squid can spoof client IP when we send > proxy format HTTP request from Mozill

[squid-users] Client IP spoofing via squid proxy

2015-05-05 Thread Ambadas Hibare
Hi, I trying to spoof client IP via squid proxy by following squid's TPROXY4 wiki page: http://wiki.squid-cache.org/Features/Tproxy4 But I want to know whether squid can spoof client IP when we send proxy format HTTP request from Mozilla (ie configuring proxy & port in mozilla). Can squid pro