Re: [squid-users] Need help on Client IP address.

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 07 Aug 2008 11:07:36 +1200

Niladri Mukherjee wrote:
>
> We have set up squid proxy 2.6 on Suse 10.3 with LDAP (Novell eDirectory)
> with SSO which is working fine. It is like
> Client ---> Squid ---> UTM (NAT) --> Internet
> Our UTM (Firewall with Content filter) getting the IP of the Squid only. We
> want to get the original source (Client) IP at the UTM level. The UTM can
> not decode the X_Forwarded header of squid.
>
> Need suggestion on this.

The only way this is possible is with TPROXY.

However, most FW settings for clients should be configured into squid as
well to prevent unauthorized usage.

Amos

-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE8
Received on Wed Aug 06 2008 - 23:07:40 MDT

This archive was generated by hypermail 2.2.0 : Fri Aug 08 2008 - 12:00:03 MDT