How to configure reverse proxy Squid to hide client IP?
I was able to configure Squid as a forward proxy and hide IP of clients when used through browser proxy config.
However, I want to reconfig my Squid as a reverse proxy to shield between my users and the server.
I'm using host file to redirect request.
For example, if User A enters "www.evil.com", the host file will redirect the request to Squid. Squid will then act as a reverse proxy and communicate with "www.evil.com". Users' real IP will be hidden and "evil.com" will be fooled into thinking the actual request comes from Squid.
I'm able to redirect the request to squid but "evil.com" can still see client's real IP address.
You could try telling squid to strip out some headers -
header_access From deny all
header_access Referer deny all
header_access Server deny all
header_access WWW-Authenticate deny all
header_access X-Forwarded-For deny all
header_access Via deny all
header_access Link deny all
SysAdminMan - Asterisk PBX hosting - FreePBX, A2Billing and Elastix