Am 07.01.2011 03:26, schrieb oscaruser@programmer.net:
Folks,

After searching, installing various Linuces (in the 2.6 family), e.g. CentOS, Ubuntu, and so on, I have not been able to get transparent proxy working at all. As such since it the function does not work, and there is great debate as to whether it ever worked, I would like to propose that this keyword and reference to its function be discarded entirely. This will save many folks a great deal of time and effort attempting to try and get it to work, myself having spent over 80 hours (including my precious holiday time) trying to dig, scratch, research up old posts that say it works or someone has it working under such and such a configuration! The documentation itself has folks claiming that it works and does not, which is really a bad practice. Why did you perpetuate this option in the first place?! 

I hope you see the importance and reason with my request and act immediately.

 ... Unless someone really really does have it working. 


Thank you
_______________________________________________ stunnel-users mailing list stunnel-users@mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

While I have not even tried to use the "transparent" function (stunnel runs on Windows in our environment, where "transparent" is not supported), I would like to add my two cents: For a ssl tunnel solution like stunnel, a "transparent" option is a very basic necessity. Having all connections to the application come from 127.0.0.1 makes trouble shooting and auditing very problematic. Therefore, transparent operations should be the default, not an afterthought only available on one platform.

I therefore counter-propose to make this option work, and make it work on all supported platforms. While I know that this will probably not be possible, since it would require a lot of programming work to be done, I nevertheless wanted to make it clear, that this option is not unnecessary and should not be simply discarded.


Greetings
Markus Borst


-- 
TU Darmstadt
Hochschulrechenzentrum (HRZ)
Markus Borst
Adresse: 	Petersenstrasse 30, 64287 Darmstadt, Germany
Tel.: 	06151/16-2056
Email: 	M.Borst@hrz.tu-darmstadt.de