Karanta kuskuren Squid SO_ORIGINAL_DST

NF getsockopt(SO_ORIGINAL_DST) yana nuni ga neman asalin wurin da aka nufa. A tsarin tsangwama, Squid dole ne ya gano inda haɗin da aka juya yake zuwa da farko.

Burawsa da aka saita a fili tana aika buƙatunta zuwa wakili da gangan. Wannan haɗin ba ya samun tarihin tsangwamar NAT kawai saboda an rubuta intercept kusa da tashar mai sauraren Squid.

Don haka wannan rashin daidaituwa na iya gazawa kafin takardar shaidar wurin da aka nufa ta zama mai muhimmanci.

Fara da yadda haɗin ya zo

• Idan aikace-aikacen yana da adireshin wakili da aka saita, gano mai sauraren wakilin turawa na yau da kullum da ya kamata ya yi amfani da shi.
• Idan ƙofa tana juya zirga-zirgar da ta kasance kai tsaye, duba cewa ta isa mai sauraren tsangwamar da aka yi niyya kuma tsarin NAT da ake goyon baya yana adana bayanin wurin da ake buƙata.
• Idan duka hanyoyin biyu suna nan, duba wace adireshi da tasha abokin cinikin da ya gaza ya tuntuɓa a zahiri.

Dokar Squid kan http_port tana bayyana bambancin sarai: barin tutar yanayi yana zaɓar yanayin wakilin turawa; intercept yana tsammanin tsangwamar NAT a matakin IP.

Sa'an nan ka magance tsaron jigilar dabam. Wakilin HTTP na iya ɗaukar HTTPS ta CONNECT. Haɗin TLS zuwa wakilin yana buƙatar mai saurare da saitin abokin ciniki masu jituwa. Buɗe zirga-zirgar wurin da aka nufa wata ƙarin iyawa ce ta zaɓi.

Kada ka kwafi tsohon “maganin HTTPS” wanda ke kunna samar da takardar shaida kawai saboda adireshin wurin da aka nufa ya fara da HTTPS. Fara gyara yarjejeniyar tsakanin abokin ciniki da mai saurare. Idan kuskuren TLS na gaske ya rage bayan haka, zai zama kuskure mafi amfani don bincike.