Networking Forums

Networking Forums > Computer Networking > Linux Networking > How to make transparent proxy's source ip NOT unique ?

Reply
Thread Tools Display Modes

How to make transparent proxy's source ip NOT unique ?

 
 
Mickey Jerry
Guest
Posts: n/a

 
      02-21-2006, 06:31 AM
How to make transparent proxy's source ip NOT unique ?

Topology like this:
Client(s)<-->BOX<-->Gateway
where the BOX is inserted between Client(s) and its Gateway

On the box, we REDIRECT all client's incoming requests (related to some
protocol only)
to a local program which acts as a filter/proxy of the protocol.
The filter program will talk to the orginal server instead
and forward its responses back to the client.

Although it seems transparent for the client,
the gateway will see only the BOX's requests.
in some cases, this will be troublesome:
e.g. if there exsits rules based on per ip's traffic,
and all clients' requests will be invisible to gateway (because they
are proxyed).

Is it possible that the BOX still filters clients' packets,
yet keep its outgoing packtet's source ip as before redirected ?
(we also want the server's resposnse pass the BOX first)
Can a SNAT sufficient for this task ?
(The best effect is to use its original source ip.)

Furthur more, we want to differentiate clients' requests from BOX's,
that is, local(not proxyed) outgoing requests shoulded not be SNATed
(or at least, should not be fed into our filter program).

Can we achieve it just using iptables without modification of our
program ?
Or is there any API from netfilter extension that we can use
from user-level applicaiton (not kernel) to do SNAT ?

 
Reply With Quote
 
 
 
 
Eric Lalitte
Guest
Posts: n/a

 
      02-21-2006, 10:51 AM
"Mickey Jerry" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com
> How to make transparent proxy's source ip NOT unique ?


You can make your proxy act like a bridge, not a router.
Thus it doesn't have any IP address.


--
Posted via Mailgate.ORG Server - http://www.Mailgate.ORG
 
Reply With Quote
 
Mickey Jerry
Guest
Posts: n/a

 
      02-22-2006, 02:22 AM
Can you give some advise on how to make a socket-API based user-space
program to act like a bridge ?

Or should I use a totally different set of APIs to achieve this feather
?

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
client source address with squid transparent proxy awrightus@gmail.com Linux Networking 0 12-31-2008 02:42 PM
Make Sense Of Google Adsense And Make Money!- Lesson 1 arigano.spagety@gmail.com Wireless Internet 0 10-03-2007 03:38 AM
how to make squid transparent ? Sanal Kisi Linux Networking 2 03-23-2005 07:24 AM
Make Money Fast $$$, This is Not a Joke! Make up to $20,000 quickly and safely make@money.com Wireless Internet 1 01-28-2004 03:25 AM
am I unique ? Phian Broadband 5 08-21-2003 11:53 AM



1 2 3 4 5 6 7 8 9 10 11