Re: linux and ipchains

Chris Conn wrote:

> Is it possible, using ipchains, to insert a rule before the 80->3128 port
> redirect, based on destination IPs, to forward a request without address
> modifications in order to preserve the IP address of the original
> requestor?

Yes, but then will it bypass the cache as well. What you do is to insert
a matching accept rule ahead of the redirection rule.

It is however possible to do slight modifications to both Squid and
Linux to allow Squid to use the IP address of the requestor, but you
need to be very careful with your routing when doing such things.. More
information available on request to people with good knowledge of TCP/IP
routing and not afraid of coding C or modifying their kernel.

--
Henrik Nordstrom
Spare time Squid hacker