[zorp] Zorp and Traffic Control

c0g zorp@lists.balabit.hu
Mon, 31 Mar 2003 13:24:59 +0200


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi!
Could Zorp work as "real" transparent proxy, so neither client nor
server will see its IP address? I need this for per ip bandwidth
limiting. This example ilustrate this:

client1 ----- zorp_transparent_firewall ----- internet ----- server
client2
..
clientn

Clients have _public_ IPs.
Is this possible:
When client connects to server, zorp intercept that connection, does
protocol analysis etc., and then connents to server as _client_ IP. So,
server sees in its log, that connection was made by client, not Zorp
machine.

If Zorp could do this, I could set per ip bandwitdh limiting (cbq rules)
on both firewall interfaces, not only on internal NIC. Therefore
outgoing traffic would be shaped too.

- --
c0g@wp.pl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+iCWLPqmVt5WhbA8RAmADAJ0UdLDd7epAp0p5A8m4Jm7phOUXWACeKwva
k7sDDpPqozPAww6vqoMyW7w=
=QRJL
-----END PGP SIGNATURE-----