Re: appropriate way to do transparent proxy to a node on the LAN
Phil Whineray <[email protected]> Sun, 23 Jul 2017 08:31:09 +0100
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <20170723073109.qabz56z5mdqq7pce@xps> |
T24gU2F0LCBKdWwgMjIsIDIwMTcgYXQgMTA6NDY6NDNQTSArMDAwMCwgU3Bpa2Ugd3JvdGU6Cj4g UGhpbCwKPiAKPiB0aGFuayB5b3UgZm9yIHlvdXIgbWVzc2FnZSwgdmVyeSBtdWNoIGFwcHJlY2lh dGUgdGhlIGhlbHAuIEkgaGFkIGNvbXBsZXRlbHkKPiBmb3Jnb3R0ZW4gYWJvdXQgdGhlIGlzc3Vl IG9mIGNsaWVudCBpcCwgSSBkZWZpbml0ZWx5IG5lZWQgdGhhdCB0byBhcHBseQo+IHNvbWUgcnVs ZXMgYmFzZWQgb24gdGhlIGNsaWVudCBzbyBpdCBzZWVtcyBJJ2xsIGhhdmUgdG8gZ28gdGhlIHJv dXRpbmcgd2F5LAo+IHdoaWNoIEkgYWN0dWFsbHkgZG9uJ3QgbWluZCBhbmQgaW4gYSBzZW5zZSBw cmVmZXIgdG8gTkFUJ2luZy4gV2l0aCB0aGF0IGluCj4gbWluZCB0aG8sIGFuZCB0aGlzIG1heSBi ZSBPVCBhbmQgbW9yZSBmbyBhIG5ldHdvcmtpbmcgcXVlc3Rpb24sIGhvdyBpcyB0aGUKPiByb3V0 aW5nIHNjZW5hcmlvIHNvbHZlIHRoZSByZXR1cm4gcGF0aCBpc3N1ZT8gb25jZSB0aGUgZmlsdGVy aW5nIGJveAo+IHJlY2VpdmVzIHRoZSByZXF1ZXN0LCB3b24ndCB0aGUgc291cmNlIGlwIHN0aWxs IGJlIHRoZSBvbmUgb2YgdGhlIGNsaWVudD8KPiAod2hpY2ggaXMgdGhlIHdob2xlIHBvaW50KS4g QW5kIHRoYXQgYmVpbmcgdGhlIGNhc2UsIHdvbid0IHRoZSBmaWx0ZXIgdGhlbgo+IHRyeSB0byBy b3V0ZSBpdCBiYWNrIHRvIHRoZSBjbGllbnQgd2hpY2ggaXMgb25lIHRoZSBzYW1lIExBTj8gaXQg c2VlbXMgZm9yCj4gdGhlIGFib3ZlIHRvIHdvcmsgdGhlIGNvbnRlbnQgZmlsdGVyIGFuZCB0aGUg bGFuIHdvdWxkIGhhdmUgdG8gYmUgb24gdGhlaXIKPiBvd24gbmV0d29yayBzZXBhcmF0ZSBmcm9t IHRoZSBjbGllbnQuCj4gWy4uLl0KCkluIHRoZSBzZXR1cCBJIGNyZWF0ZWQsIHNxdWlkIHdhcyBp biBhIERNWiwgc28gZG8gbm90IGhhdmUgYW55IGFjdHVhbApleHBlcmllbmNlIG9mIHRoaXMgZXhh Y3QgcHJvYmxlbS4KCkkgdGhpbmsgeW91IGhhdmUgdHdvIGNob2ljZXMsIHByb2JhYmx5OgoKMS4g VXNlIHBvbGljeSBiYXNlZCByb3V0aW5nIG9uIHRoZSBzcXVpZCBib3ggdG9vCjIuIE1ha2UgdGhl IGZpcmV3YWxsIHJ1bGVzIGZvciBvdXRnb2luZyBIVFRQIHRyYWZmaWMgKHZpYSBzcXVpZCkgc3Rh dGVsZXNzCgpJbiB0aGUgY2FzZSBvZiAoMSkgeW91IHdvdWxkIG5lZWQgdG8gbG9vayBhdCBgaXAg cnVsZWAgb24gdGhlIHNxdWlkIGJveAp0byBkaXJlY3QgYW55IHRyYWZmaWMgd2l0aCBhIG5vbi1s b2NhbCBJUCBiYWNrIHRvIHRoZSBmaXJld2FsbC4gVGhlbiB5b3UKbmVlZCB0byBtYWtlIHN1cmUg dGhlIGZpcmV3YWxsIGFsbG93cyBmb3Igc29tZSBleHRlcm5hbCBJUHMgaW5jb21pbmcgdG8KeW91 ciBpbnRlcm5hbCBpbnRlcmZhY2UuCgpGb3IgKDIpIHlvdSB3b3VsZCBqdXN0IHNldCB1cCBhIHN0 YXRlbGVzcyBydWxlIGZvciBwb3J0IDgwIHBhY2tldHMKdHJhdmVsbGluZyB0byB0aGUgc3F1aWQg SVAuIEV4cGxpY2l0bHkgYWRkaW5nIGEgTk9UUkFDSyBydWxlIGluCnByZXJvdXRpbmcgbWlnaHQg YmUgYSBnb29kIGlkZWEgdG9vLCBzaW5jZSBhcyB5b3UndmUgYWxyZWFkeSBvYnNlcnZlZCwKdGhl IGNvbm5lY3Rpb25zIHdpbGwgbmV2ZXIgZm9ybSBwcm9wZXJseSBmcm9tIHRoZSBmaXJld2FsbCdz IHZpZXcuCgpJIHRoaW5rIHRoaXMgc2hvdWxkIGFsbCB3b3JrOiBzcXVpZCB3aXRoIHRoZSBsb2Nh bCBSRURJUkVDVCBzaG91bGQKdGFrZSBjYXJlIG9mIHBhY2tldHMgY29taW5nIGJhY2sgd2l0aCB0 aGUgb2ZmaWNpYWwgZXh0ZXJuYWwgSVAuCkV2ZXJ5dGhpbmcgZWxzZSB0aGlua3MgaXQgaXMganVz dCBkb2luZyBub3JtYWwgcm91dGluZy4KCk9yLCBpc29sYXRlIHRoZSB0cmFmZmljIGluIHNvbWUg d2F5OiBhIFZMQU4gd291bGQgd29yayBpZiB5b3UgaGF2ZSB0aGUKYWJpbGl0eSB0byBzZXQgb25l IHVwIG9uIHdoYXRldmVyIGNvbm5lY3RzIGZpcmV3YWxsIHRvIHNxdWlkLiBJbiB0aGUKZmlyZXdh bGwgYW5kIHNxdWlkIGl0IGlzIGp1c3QgYW4gZXh0cmEgaW50ZXJmYWNlIHNvIHdvdWxkIG1ha2Ug dGhlCmNvbmZpZyBzaW1wbGVyIG92ZXJhbGwsIEkgaW1hZ2luZS4KCgo+IE9uIFNhdCwgSnVsIDIy LCAyMDE3IGF0IDEyOjE3IEFNIFBoaWwgV2hpbmVyYXkgPHBoaWxAZmlyZWhvbC5vcmc+IHdyb3Rl Ogo+IFsuLi5dCj4gPiBUbyByZXNvbGUgdGhhdCB5b3Ugd291bGQgdXNlIGludGVyY2VwdCB3aXRo IHBvbGljeSBiYXNlZCByb3V0aW5nIGJ1dAo+ID4gdGhhdCBpcyBjb25zaWRlcmFibHkgbW9yZSBl ZmZvcnQgdG8gc2V0IHVwOgo+ID4KPiA+ICogb24gZmlyZXdhbGwsIG1hcmsgdGhlIEhUVFAgdHJh ZmZpYyBpbiBmaXJlaG9sCj4gPiAqIG9uIGZpcmV3YWxsLCB1c2UgYGlwYCB0byBzZXQgdXAgYSBy b3V0aW5nIHRhYmxlIHdpdGggc3F1aWQgcHJveHkgYXMKPiA+IGdhdGV3YXkKPiA+ICogb24gZmly ZXdhbGwsIHVzZSBgaXBgIHRvIHNldCBydWxlIHNlbmRpbmcgbWFya2VkIHRyYWZmaWMgdG8gdGhh dCB0YWJsZQo+ID4gKiBvbiBzcXVpZCBwcm94eSwgY3JlYXRlIGEgUkVESVJFQ1QgcnVsZSBzaW1p bGFyIHRvIHlvdXIgZXhpc3Rpbmcgb25lCj4gPgo+ID4gVGhpcyBzdGFja2V4Y2hhbmdlIHBvc3Qg WzJdIGxvb2tzIGFib3V0IHJpZ2h0LCBhbGJlaXQgd2l0aCBwbGFpbgo+ID4gaXB0YWJsZXMgY29t bWFuZHMuCj4gPgo+ID4gSG9wZSB0aGF0IGhlbHBzCj4gPiBQaGlsCj4gPgo+ID4gWzFdOiBodHRw czovL3NxdWlkcHJveHkud29yZHByZXNzLmNvbS9jYXRlZ29yeS9pbnRlcmNlcHRpb24vCj4gPiBb Ml06IGh0dHA6Ly93aWtpLnNxdWlkLWNhY2hlLm9yZy9Db25maWdFeGFtcGxlcy9JbnRlcmNlcHQv TGludXhEbmF0Cj4gPiBbM106Cj4gPiBodHRwczovL3VuaXguc3RhY2tleGNoYW5nZS5jb20vcXVl c3Rpb25zLzEzODAxMy9yb3V0aW5nLWludGVybmV0LW9uLW5hdC1zZXJ2ZXItdGhydS1zcXVpZC1w cm94eQo+ID4KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18K RmlyZWhvbC1zdXBwb3J0IG1haWxpbmcgbGlzdApGaXJlaG9sLXN1cHBvcnRAbGlzdHMuZmlyZWhv bC5vcmcKaHR0cDovL2xpc3RzLmZpcmVob2wub3JnL21haWxtYW4vbGlzdGluZm8vZmlyZWhvbC1z dXBwb3J0