[tproxy] New challenge: a design issue
Ming-Ching Tiew
mingching.tiew at redtone.com
Thu Dec 13 07:24:53 CET 2007
From: "Ming-Ching Tiew" <mingching.tiew at redtone.com>
>
> However, in tproxy4 this feature cannot coexist with
> early spoofing. Either I use squid's tcp_outgoing_address
> or I used the spoof-ed sender address. And for tproxy users,
> spoofing sender address is more important, and therefore
> there is no way to use squid's ACL to influence the outgoing
> path. All outgoing path decisions will have to be made
> external to squid then.
>
I think I will work around this problem using TOS then,
since squid support TOS setting, ie all tcp_outgoing_address
settings will be ignored and squid will incluence the external
route using TOS setttings.
Cheers.
More information about the tproxy
mailing list