Re: appropriate way to do transparent proxy to a node on the LAN

Spike <[email protected]> Sat, 22 Jul 2017 22:46:43 +0000
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CAPE6YbRGmnHwJFG2EJgV7RpDMSzzNhcxU0FBXEND8AG9h-rQmQ@mail.gmail.com>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