HTTP_X_FORWARDED_FOR , HTTP_VIA , IP
在局域網通過透明代理訪問外部的web服務器時,
在web服務器端,
通過header HTTP_X_FORWARDED_FOR 可以知道代理服務器的服務器名以及端口,
通過HTTP_VIA可以知道客戶的內部ip,這會帶來一些安全問題,並且某些論壇會發現用的是代理訪問,怎麼讓squid隱藏這些信息呢.
通過研究squid的源代碼,發現在/etc/squid/squid.conf中添加2行:
header_aclearcase/" target="_blank" >ccess Via deny all
header_access X-Forwarded-For deny all
就可以把它關閉
要去掉其他的header,也可以照此操作:
AcceptHTTP_ACCEPTAccept-CharsetHTTP_ACCEPT-CHARSETAccept-EncodingHTTP_ACCEPT-ENCODINGAccept-LanguageHTTP_ACCEPT-LANGUAGEAccept-RangesHTTP_ACCEPT-RANGESAgeHTTP_AGEAllowHTTP_ALLOWAuthorizationHTTP_AUTHORIZATIONCache-ControlHTTP_CACHE-CONTROLConnectionHTTP_CONNECTIONContent-BaseHTTP_CONTENT-BASEContent-DispositionHTTP_CONTENT-DISPOSITIONContent-EncodingHTTP_CONTENT-ENCODINGContent-LanguageHTTP_CONTENT-LANGUAGEContent-LengthHTTP_CONTENT-LENGTHContent-LocationHTTP_CONTENT-LOCATIONContent-MD5HTTP_CONTENT-MD5Content-RangeHTTP_CONTENT-RANGEContent-TypeHTTP_CONTENT-TYPECookieHTTP_COOKIEDateHTTP_DATEETagHTTP_ETAGExpiresHTTP_EXPIRESFromHTTP_FROMHostHTTP_HOSTIf-MatchHTTP_IF-MATCHIf-Modified-SinceHTTP_IF-MODIFIED-SINCEIf-None-MatchHTTP_IF-NONE-MATCHIf-RangeHTTP_IF-RANGELast-ModifiedHTTP_LAST-MODIFIEDLinkHTTP_LINKLocationHTTP_LOCATIONMax-ForwardsHTTP_MAX-FORWARDSMime-VersionHTTP_MIME-VERSIONPragmaHTTP_PRAGMAProxy-AuthenticateHTTP_PROXY-AUTHENTICATEProxy-Authentication-InfoHTTP_PROXY-AUTHENTICATION-INFOProxy-AuthorizationHTTP_PROXY-AUTHORIZATIONProxy-ConnectionHTTP_PROXY-CONNECTIONPublicHTTP_PUBLICRangeHTTP_RANGERefererHTTP_REFERERRequest-RangeHTTP_REQUEST-RANGERetry-AfterHTTP_RETRY-AFTERServerHTTP_SERVERSet-CookieHTTP_SET-COOKIETitleHTTP_TITLETransfer-EncodingHTTP_TRANSFER-ENCODINGUpgradeHTTP_UPGRADEUser-AgentHTTP_USER-AGENTVaryHTTP_VARYViaHTTP_VIAWarningHTTP_WARNINGWWW-AuthenticateHTTP_WWW-AUTHENTICATEAuthentication-InfoHTTP_AUTHENTICATION-INFOX-CacheHTTP_X-CACHEX-Cache-LookupHTTP_X-CACHE-LOOKUPX-Forwarded-ForHTTP_X-FORWARDED-FORX-Request-URIHTTP_X-REQUEST-URIX-Squid-ErrorHTTP_X-SQUID-ERRORNegotiateHTTP_NEGOTIATEX-Accelerator-VaryHTTP_X-ACCELERATOR-VARYOther:HTTP_OTHER:
