Re: [squid-users] transparent proxy original_dst err

2015-04-28 Thread jaykbvt
Hi Amos, We've got response from Cisco team and they've agreed that destination IP gets changed when request passes through Cisco ISG. They are taking reference for configuration from this doc http://www.cisco.com/c/en/us/td/docs/ios/isg/configuration/guide/15_0s/isg_15_0s_book/isg_l4_redirect.

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread Amos Jeffries
On 22/04/2015 7:31 a.m., jaykbvt wrote: > Hi Amos, > > Thanks for reply, > > I think I got ur point. If I understood correctly, > > if a user makes request for http://www.wikipedia.org then the client request > header should look like: > > src: client_IP:random_port > dst: wikipedia.org(ip_addr

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread jaykbvt
Hi Amos, Thanks for reply, I think I got ur point. If I understood correctly, if a user makes request for http://www.wikipedia.org then the client request header should look like: src: client_IP:random_port dst: wikipedia.org(ip_address):http http request: http_request details. (host,url,etc..)

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread Amos Jeffries
On 22/04/2015 12:43 a.m., jaykbvt wrote: > Hi Amos, > > Thanks for reply. > > > local=*10.58.200.33:80 remote=10.210.83.249:*3375 FD 10 flags=33: accepted > > > since squid is able to understand which client is requesting and following > lines t

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread jaykbvt
Hi Amos, Thanks for reply. local=*10.58.200.33:80 remote=10.210.83.249:*3375 FD 10 flags=33: accepted since squid is able to understand which client is requesting and following lines talks about request.. parseHttpReque

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread Yuri Voinov
21.04.15 17:20, Amos Jeffries пишет: On 21/04/2015 10:44 p.m., jaykbvt wrote: Hi, My squid is configured in interception mode with http_port 3130 http_port 3129 intercept squid is running with single network card. request comes from the Cisco ISG and internet is also allowed from the same Cis

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread Amos Jeffries
On 21/04/2015 10:44 p.m., jaykbvt wrote: > Hi, > My squid is configured in interception mode with > > http_port 3130 > http_port 3129 intercept > > squid is running with single network card. request comes from the Cisco ISG > and internet is also allowed from the same Cisco ISG only. I think th

Re: [squid-users] transparent proxy original_dst err

2015-04-21 Thread Yuri Voinov
So, what? What's the problem? 21.04.15 16:44, jaykbvt пишет: Hi, My squid is configured in interception mode with http_port 3130 http_port 3129 intercept squid is running with single network card. request comes from the Cisco ISG and internet is also allowed from the same Cisco ISG only. IPt

[squid-users] transparent proxy original_dst err

2015-04-21 Thread jaykbvt
Hi, My squid is configured in interception mode with http_port 3130 http_port 3129 intercept squid is running with single network card. request comes from the Cisco ISG and internet is also allowed from the same Cisco ISG only. IPtables has been configured with following squidip = 10.58.200.33