Re: [squid-users] tproxy configuration

2013-02-25 Thread Amos Jeffries
On 25/02/2013 3:00 p.m., Roman Gelfand wrote: Amos, Do you have an idea as to what I am doing wrong here? Unfortunately no. All the things that were wrong have apparently been fixed without affecting the outcome. There is nothing more I can suggest besides a double-triple-check of the

Re: [squid-users] tproxy configuration

2013-02-24 Thread Roman Gelfand
Amos, Do you have an idea as to what I am doing wrong here? Thanks, On Fri, Feb 22, 2013 at 12:40 PM, Roman Gelfand rgelfa...@gmail.com wrote: Thanks for taking time to help me out. If I understood you correctly, I think I made the changes you mentioned including iptables -A FORWARD -i eth0

Re: [squid-users] tproxy configuration

2013-02-22 Thread Roman Gelfand
Thanks for taking time to help me out. If I understood you correctly, I think I made the changes you mentioned including iptables -A FORWARD -i eth0 -j ACCEPT line. still no luck. Below, is the is the diagnostics. Chain PREROUTING (policy ACCEPT 13 packets, 8499 bytes) pkts bytes target

[squid-users] tproxy configuration

2013-02-21 Thread Roman Gelfand
Please, find below the network topology, squid.conf and rc.local configuration files. It appears that the squid is not routing the http requests. I am not sure what I am doing wrong here Please note, the same squid.conf works on transparent proxy (non tproxy), for the exception of tproxy

Re: [squid-users] tproxy configuration

2013-02-21 Thread Amos Jeffries
On 22/02/2013 11:03 a.m., Roman Gelfand wrote: Please, find below the network topology, squid.conf and rc.local configuration files. It appears that the squid is not routing the http requests. I am not sure what I am doing wrong here Please note, the same squid.conf works on transparent

Re: [squid-users] tproxy configuration

2013-02-21 Thread Roman Gelfand
On Thu, Feb 21, 2013 at 6:10 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 22/02/2013 11:03 a.m., Roman Gelfand wrote: Please, find below the network topology, squid.conf and rc.local configuration files. It appears that the squid is not routing the http requests. I am not sure what I

Re: [squid-users] tproxy configuration

2013-02-21 Thread Amos Jeffries
On 22/02/2013 5:07 p.m., Roman Gelfand wrote: On Thu, Feb 21, 2013 at 6:10 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 22/02/2013 11:03 a.m., Roman Gelfand wrote: Please, find below the network topology, squid.conf and rc.local configuration files. It appears that the squid is not

[squid-users] TPROXY Configuration

2013-02-06 Thread Roman Gelfand
I have configured the tproxy as follows, but it appears packets are not hitting squid. Please note, the wccp configuration on the router is already working with squid http_port transparent configuration and, obviously, different iptables configuration. Any help is appreciated. Thanks in

Re: [squid-users] tproxy configuration

2012-07-19 Thread Eliezer Croitoru
On 7/17/2012 6:01 PM, Wayne Lee wrote: SNIP Many thanks Eliezer. I still have the same issue in that once the packets arrive on the squid box they are not actually diverted into the squid daemon and thus fail. I have managed to find a working solution and that is to not use wccp and just

Re: [squid-users] tproxy configuration

2012-07-19 Thread Wayne Lee
Sent from my iPad On 19 Jul 2012, at 19:58, Eliezer Croitoru elie...@ngtech.co.il wrote: On 7/17/2012 6:01 PM, Wayne Lee wrote: SNIP Many thanks Eliezer. I still have the same issue in that once the packets arrive on the squid box they are not actually diverted into the squid daemon

Re: [squid-users] tproxy configuration

2012-07-19 Thread Eliezer Croitoru
On 7/20/2012 12:35 AM, Wayne Lee wrote: Sent from my iPad On 19 Jul 2012, at 19:58, Eliezer Croitoru elie...@ngtech.co.il wrote: On 7/17/2012 6:01 PM, Wayne Lee wrote: SNIP if the packets are not diverted into squid there is something wrong with your setup. if you will post your squid

Re: [squid-users] tproxy configuration

2012-07-17 Thread nipun_mlist Assam
what do you want to achieve? everything that can be achieved using WCCP can be achieved in other way with tproxy. Eliezer WCCP makes sure that only traffic on some specific ports(generally port 80 and 443) goes via Squid box. In case of tproxy all the traffic will flow via squid box if it has

Re: [squid-users] tproxy configuration

2012-07-17 Thread nipun_mlist Assam
Eliezer, Thanks for the links. The diagram in the first link is good but I don't know to read that language. Also, squid has a bug regarding its tproxy feature, it never spoofs the client IP. I made a small fix for that issue, but that was one year back and I lost the code with the fix.

Re: [squid-users] tproxy configuration

2012-07-17 Thread Amos Jeffries
On 17/07/2012 10:44 p.m., nipun_mlist Assam wrote: what do you want to achieve? everything that can be achieved using WCCP can be achieved in other way with tproxy. Eliezer WCCP makes sure that only traffic on some specific ports(generally port 80 and 443) goes via Squid box. In case of

Re: [squid-users] tproxy configuration

2012-07-17 Thread Eliezer Croitoru
On 7/17/2012 2:07 PM, nipun_mlist Assam wrote: Eliezer, Thanks for the links. The diagram in the first link is good but I don't know to read that language. Also, squid has a bug regarding its tproxy feature, it never spoofs the client IP. I made a small fix for that issue, but that was one

Re: [squid-users] tproxy configuration

2012-07-17 Thread Wayne Lee
SNIP squid config: ##start wccp2.sh #!/usr/bin/bash echo Loading modules.. modprobe -a nf_tproxy_core xt_TPROXY xt_socket xt_mark ip_gre gre LOCALIP=10.80.2.2 CISCODIRIP=10.80.2.1 #you must connect the gre tunnel to the cisco router IP identifier. CISCOIPID=192.168.10.127 echo

[squid-users] tproxy configuration

2012-07-16 Thread nipun_mlist Assam
Hi, Is there anyway to use squid tproxy feature without configuring the squid box as a router ? Is it possible to use WCCP + tproxy combination to achieve the same? -- Regards, Nipun Talukdar Bangalore

Re: [squid-users] tproxy configuration

2012-07-16 Thread Eliezer Croitoru
On 7/16/2012 1:47 PM, nipun_mlist Assam wrote: Hi, Is there anyway to use squid tproxy feature without configuring the squid box as a router ? Bridge. Is it possible to use WCCP + tproxy combination to achieve the same? there is an example at:

Re: [squid-users] tproxy configuration

2012-07-16 Thread Eliezer Croitoru
On 7/16/2012 1:47 PM, nipun_mlist Assam wrote: Hi, Is there anyway to use squid tproxy feature without configuring the squid box as a router ? Is it possible to use WCCP + tproxy combination to achieve the same? well after digging i have found it unclear at all how the squid wiki examples

[squid-users] tproxy configuration

2010-12-27 Thread benjamin fernandis
Hi, I want to deploy tproxy in my network .I m using rhel 5.5.Please provide me good document or configuration guide for getting good explanation.I m new to tproxy. And please suggest me for the same, means what are the caviates , kept in mind while using tproxy. Thanks, Benjo

Re: [squid-users] tproxy configuration

2010-12-27 Thread Amos Jeffries
On 28/12/10 00:55, benjamin fernandis wrote: Hi, I want to deploy tproxy in my network .I m using rhel 5.5.Please provide me good document or configuration guide for getting good explanation.I m new to tproxy. Step #1: upgrade. And please suggest me for the same, means what are the