I am running a transparent proxy on a remote machine for an office using rdr rules which is working great. The cacheless transparent proxy is tinyproxy 1.5.1, older versions didn't support transparent mode. The reason this proxy is setup make our web usage go through our 205.23.1.32/27 network  which is cheaper then going straight out onto the internet.
The Nat machine with these rules is on another network 210.23.55.0/24
The only problem I have is that I would like any port 80 connect attempts going to 205.23.1.32/27 network to go directly to these machines and not bother going through the transparent proxy on 205.23.1.50
To get around the problem I just added a rule for each machine I wanted to connect directly, like "rdr fxp0 205.23.1.44/27 port 80 -> 205.23.1.44 port 80"
Is this OK? or is there a better method to do this? like some general network range rule like this with a /27 (which I tried and failed to no surprise :) rdr fxp0 205.23.1.32/27 port 80 -> 205.23.1.32/27 port 80"
 
map fxp1 172.17.168.0/24 -> 0/32 proxy port ftp ftp/tcp
map fxp1 172.17.168.0/24 -> 0/32 portmap tcp/udp auto
map fxp1 172.17.168.0/24 -> 0/32
rdr fxp0 205.23.1.37/27 port 80 -> 205.23.1.37 port 80
rdr fxp0 205.23.1.39/27 port 80 -> 205.23.1.39 port 80
rdr fxp0 205.23.1.40/27 port 80 -> 205.23.1.40 port 80
rdr fxp0 205.23.1.41/27 port 80 -> 205.23.1.41 port 80
rdr fxp0 205.23.1.42/27 port 80 -> 205.23.1.42 port 80
rdr fxp0 205.23.1.43/27 port 80 -> 205.23.1.43 port 80
rdr fxp0 205.23.1.44/27 port 80 -> 205.23.1.44 port 80
rdr fxp0 205.23.1.50/27 port 80 -> 205.23.1.50 port 80
rdr fxp0 205.23.1.52/27 port 80 -> 205.23.1.52 port 80
rdr fxp0 205.23.1.53/27 port 80 -> 205.23.1.53 port 80
rdr fxp0 205.23.1.54/27 port 80 -> 205.23.1.54 port 80
rdr fxp0 205.23.1.55/27 port 80 -> 205.23.1.55 port 80
rdr fxp0 205.23.1.59/27 port 80 -> 205.23.1.59 port 80
rdr fxp0 205.23.1.62/27 port 80 -> 205.23.1.62 port 80
rdr fxp0 210.23.55.71/27 port 80 -> 210.23.55.71 port 80
rdr fxp0 0.0.0.0/0 port 80 -> 205.23.1.50 port 8080
 

Reply via email to