Re: [squid-users] Squid - Not replace source IP address

From: Matus UHLAR - fantomas <uhlar_at_fantomas.sk>
Date: Fri, 14 Aug 2009 18:06:15 +0200

>> Transparent is a good word but it means something completely different:
>>
>> A "transparent proxy" is a proxy that does not modify the request or
>> response beyond what is required for proxy authentication and
>> identification.
>>
>> This is a citation from RFC2616 which defines the HTTP protocol. Since we
>> are talking about HTTP protocol, we should use words as they are defined
>> there, otherwise it could lead to misunderstandings.

On 10.08.09 12:06, Leonardo Rodrigues wrote:
> proxies working on so-called 'transparent' fashion do not alter
> requests and responses, thus acchieving what RFC2616 says. It's true
> they alter source IP addresses ... but that is not quoted on RFC2616.
>
> So it's a matter of interpretation .... the highlighted quote, in my
> opinion, does not prohibite a proxy to alter the source IP address, as
> long the request and the responde is keep intact.
>
> That way, the so-called 'transparent' proxy setup is completly
> RFC-2616 compliant.

I don't object about RFC compliancy. I'm just saying that proxy
configured in browser and not set up to intercept connections is transparent
if it does not alter the content.

what many people mean by "transparent" proxy is really an "intercepting"
proxy. Sadly, the option for processing intercepted connections was named
"transparent" in squid which makes it also unclear.

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers. 
Received on Fri Aug 14 2009 - 16:07:00 MDT

This archive was generated by hypermail 2.2.0 : Fri Aug 14 2009 - 12:00:03 MDT