Hide Internal IP Address in DNS

[edmund085]

Greetings!

Is there any other way to hide internal ip address of the zentyal? The zentyal is connected to the primary domain controller and it has 2 interfaces. The first interface is the static one which is 121.97.xx.xx and the private ip address is 192.168.xx.xx. When I checked it at pingdom, the internal ip address keeps reappearing. I have done this with a Windows Server 2008 R2 but, I cant seem to disable the internal IP address of the zentyal from appearing in public.

[edmund085]

it seems, no one here doesnt know how to resolve the issue since no one ever replied... tsk...

[N. Balauro]

Could you describe your network config more plz? I personally dont really understand your question.

[edmund085]

sorry for my poor English construction, English is not one of our primary language. One the printscreen, the internal ip address is seen in the public. i want them hidden. I have done this in Windows Server 2008, but I cant seem to do it in Zentyal. Any other ways to eliminate this problem?

[mtrogg]

Yes well that is the FORWARDED_FOR tag in HTTP headers through squid (proxy) responses.

You'll need to adapt squid configuration files via command line to change this;

http://serverfault.com/questions/102668/remove-x-forwarded-for-header-in-squid-3-0

[N. Balauro]

Yes well that is the FORWARDED_FOR tag in HTTP headers through squid (proxy) responses.

You'll need to adapt squid configuration files via command line to change this;

http://serverfault.com/questions/102668/remove-x-forwarded-for-header-in-squid-3-0

+1 mtrogg. Thank you Sir!

Due to my unfamiliarity with Squid, I was thinking along the lings of NAT in iptables to masquerade the packets. This seems simple enough though!

[Rafo]

Well I have the same problem but everytime when I edited the squid.conf.mas I get is the error in the screenshot below.

Thanks in advance.

[N. Balauro]

As far as I can tell, 'Banned User' would be related to the proxy_auth ACLs.

[edmund085]

so ive inserted this into the squid configuration file

Code: [Select]

via off
forwarded_for off
follow_x_forwarded_for deny all
request_header_access X-Forwarded-For deny all
header_access X_Forwarded_For deny all
still not working... the internal ip address is still viewable

[N. Balauro]

Did you make sure to modify the .mas file and not the actual config?

[edmund085]

cant find the .mas file. Where is it located? all I see in the /etc/squid3/ is the conf file

[edmund085]

never mind... just found it.....

[edmund085]

still not working guys..... I can still see the IP Addresses of my internal network.

[N. Balauro]

So I tried fiddling with this. Seeing that my squid version is 3.1, I first went here.

• http://www.squid-cache.org/Versions/v3/3.1/cfgman/

Here I found these 2 relevant options.

• http://www.squid-cache.org/Versions/v3/3.1/cfgman/follow_x_forwarded_for.html
• http://www.squid-cache.org/Versions/v3/3.1/cfgman/forwarded_for.html

Then I found this, just before parsing the logfiles; after squid having trouble with the updated config changes.

NP: Squid must be built with the --enable-http-violations configure option before building.

• http://wiki.squid-cache.org/SquidFaq/ConfiguringSquid

[edmund085]

ok, you totally lost me there. Didn't understand what to do on your post.