[squid-users] Re: how to implement access control using connetcing hostname and port

From: freefall12 <freefallbenson_at_gmail.com>
Date: Fri, 11 Jul 2014 04:33:26 -0700 (PDT)

babajaga wrote
> It is not their listening port ? I doubt it, how else could you use it ?

i check the port using telnet and it is closed. i guess they employ iptables
to redirect a certain range of ports to a single port.

you are right that DNS rotation is involved, and all sub domains resolve to
3 ip addresses. you can take a look(4323232.xgj.com), if you are
interested.you can specify any random sub domain prefix, and they all point
to the same 3 ip addresses.

i tried the intercept mode and it could get the correct connecting port
number in access log (not the real listing port) but i'm wondering if it is
possible to capture the proxy address using SQUID?

Thanks for your reply

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/how-to-implement-access-control-using-connetcing-hostname-and-port-tp4666818p4666848.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Fri Jul 11 2014 - 11:33:26 MDT

This archive was generated by hypermail 2.2.0 : Fri Jul 11 2014 - 12:00:04 MDT