<DIV>that's seems your tproxy doesn't work yet..<BR><BR></DIV>
<DIV></DIV><BR><PRE>在2009-05-30&nbsp;18:00:02,tproxy-request@lists.balabit.hu&nbsp;写道:
&gt;Send&nbsp;tproxy&nbsp;mailing&nbsp;list&nbsp;submissions&nbsp;to
&gt;        tproxy@lists.balabit.hu
&gt;
&gt;To&nbsp;subscribe&nbsp;or&nbsp;unsubscribe&nbsp;via&nbsp;the&nbsp;World&nbsp;Wide&nbsp;Web,&nbsp;visit
&gt;        https://lists.balabit.hu/mailman/listinfo/tproxy
&gt;or,&nbsp;via&nbsp;email,&nbsp;send&nbsp;a&nbsp;message&nbsp;with&nbsp;subject&nbsp;or&nbsp;body&nbsp;'help'&nbsp;to
&gt;        tproxy-request@lists.balabit.hu
&gt;
&gt;You&nbsp;can&nbsp;reach&nbsp;the&nbsp;person&nbsp;managing&nbsp;the&nbsp;list&nbsp;at
&gt;        tproxy-owner@lists.balabit.hu
&gt;
&gt;When&nbsp;replying,&nbsp;please&nbsp;edit&nbsp;your&nbsp;Subject&nbsp;line&nbsp;so&nbsp;it&nbsp;is&nbsp;more&nbsp;specific
&gt;than&nbsp;"Re:&nbsp;Contents&nbsp;of&nbsp;tproxy&nbsp;digest..."
&gt;
&gt;
&gt;Today's&nbsp;Topics:
&gt;
&gt;&nbsp;&nbsp;&nbsp;1.&nbsp;Is&nbsp;tproxy&nbsp;a&nbsp;real&nbsp;transparent&nbsp;proxy?&nbsp;(mtpr)
&gt;
&gt;
&gt;----------------------------------------------------------------------
&gt;
&gt;Message:&nbsp;1
&gt;Date:&nbsp;Fri,&nbsp;29&nbsp;May&nbsp;2009&nbsp;20:07:55&nbsp;+0100
&gt;From:&nbsp;mtpr&nbsp;&lt;mtpr@carreira.com.pt&gt;
&gt;Subject:&nbsp;[tproxy]&nbsp;Is&nbsp;tproxy&nbsp;a&nbsp;real&nbsp;transparent&nbsp;proxy?
&gt;To:&nbsp;tproxy@lists.balabit.hu
&gt;Message-ID:&nbsp;&lt;4A20328B.30304@carreira.com.pt&gt;
&gt;Content-Type:&nbsp;text/plain;&nbsp;charset=ISO-8859-1;&nbsp;format=flowed
&gt;
&gt;I&nbsp;am&nbsp;testing&nbsp;tproxy&nbsp;with&nbsp;a&nbsp;vmware&nbsp;Centos-5.3&nbsp;virtual&nbsp;server.
&gt;I&nbsp;installed&nbsp;squid-3.1,&nbsp;iptables-1.4.3&nbsp;and&nbsp;kernel-2.6.28.3.
&gt;Everything&nbsp;seems&nbsp;to&nbsp;be&nbsp;working,&nbsp;unless&nbsp;one...
&gt;There&nbsp;is&nbsp;a&nbsp;proxy&nbsp;behaviour&nbsp;I&nbsp;thought&nbsp;it&nbsp;would&nbsp;be&nbsp;expectable,&nbsp;but&nbsp;I&nbsp;found&nbsp;
&gt;it&nbsp;doesn't&nbsp;work&nbsp;the&nbsp;way&nbsp;I&nbsp;thought.
&gt;
&gt;Here&nbsp;is&nbsp;the&nbsp;example:
&gt;If&nbsp;I&nbsp;create&nbsp;a&nbsp;cgi-bin&nbsp;script&nbsp;in&nbsp;a&nbsp;apache&nbsp;webserver&nbsp;that&nbsp;prints&nbsp;the&nbsp;
&gt;client&nbsp;ip&nbsp;address&nbsp;like&nbsp;this&nbsp;one:
&gt;
&gt;#!/bin/env&nbsp;python
&gt;#&nbsp;coding:&nbsp;utf-8
&gt;import&nbsp;os
&gt;
&gt;print&nbsp;'Content-Type:&nbsp;text/plain'
&gt;print
&gt;print&nbsp;os.environ['REMOTE_ADDR']
&gt;
&gt;I&nbsp;thought&nbsp;that,&nbsp;in&nbsp;a&nbsp;real&nbsp;transparent&nbsp;proxy,&nbsp;it&nbsp;would&nbsp;give&nbsp;me&nbsp;the&nbsp;
&gt;original&nbsp;client&nbsp;ip&nbsp;address&nbsp;of&nbsp;the&nbsp;browser&nbsp;computer.
&gt;But&nbsp;no!
&gt;Like&nbsp;the&nbsp;old&nbsp;transparent&nbsp;proxy&nbsp;way&nbsp;(not&nbsp;tproxy),&nbsp;it&nbsp;prints&nbsp;the&nbsp;ip&nbsp;
&gt;address&nbsp;of&nbsp;the&nbsp;proxy&nbsp;server.
&gt;If&nbsp;I&nbsp;want&nbsp;the&nbsp;original&nbsp;ip&nbsp;address,&nbsp;I&nbsp;need&nbsp;to&nbsp;read&nbsp;the&nbsp;environment&nbsp;
&gt;variable&nbsp;HTTP_X_FORWARDED_FOR.
&gt;It&nbsp;doesn't&nbsp;seem&nbsp;to&nbsp;be&nbsp;a&nbsp;"real"&nbsp;transparent&nbsp;proxy.
&gt;
&gt;Is&nbsp;this&nbsp;the&nbsp;expectable&nbsp;behaviour,&nbsp;or&nbsp;could&nbsp;be&nbsp;something&nbsp;wrong&nbsp;with&nbsp;the&nbsp;
&gt;way&nbsp;I&nbsp;setup&nbsp;my&nbsp;tproxy?
&gt;
&gt;
&gt;mtpr
&gt;
&gt;
&gt;------------------------------
&gt;
&gt;_______________________________________________
&gt;tproxy&nbsp;mailing&nbsp;list
&gt;tproxy@lists.balabit.hu
&gt;https://lists.balabit.hu/mailman/listinfo/tproxy
&gt;
&gt;
&gt;End&nbsp;of&nbsp;tproxy&nbsp;Digest,&nbsp;Vol&nbsp;47,&nbsp;Issue&nbsp;9
&gt;*************************************
</PRE><br><!-- footer --><br><span title="neteasefooter"/><hr/>
<a href="http://512.mail.163.com/mailstamp/stamp/dz/activity.do?from=footer">穿越地震带 纪念汶川地震一周年</a>
</span>