Hello
I'm using squid 3.1.6 on Debian Squeeze. I run two instances of squid -
on port 3128 and 3129. The instance on port 3128 services my LAN
clients, authenticating via Kerberos/negotiate. The other instance acts
as a transparent proxy (via a DNAT rule on a router).
I have two questions.
Hi all,
I'm at opensuse 12.1 ... with his susefirewall2 ...
I configure a transparent proxy ... all most everything works fine ...
when I try to connect a https site I have different errors:
from messages:
Jan 31 21:12:26 ladificil squid[2588]: parseHttpRequest: Unsupported
method '#026#003#001'
My goal is to make suid as transparent proxy. I see several options.
Not sure which one I should be using. I am looking for standard
transparent proxy server.
--enable-ipfw-transparent or --enable-ipf-transparent or --enable-pf-transparent
Thanks in advance
Assuming that configuring client browsers' proxy is not a problem, is
there a good (where good overweighs bad) reason to use squid
transparent proxy feature?
The reason why I am asking is I just skimmed through squid book and
they are not painting a rosy picture around transparent proxy.
Thanks i
Hi guys
I'm configuring the transparent proxy but i have a difficulty ...
The Intercepition don't' work if configure only
http_port 3128 transparent ?
I must shape the iptables by force?
http://wiki.squid-cache.org/SquidFaq/InterceptionProx
thanks
Hi List,
I'm new to this list. i have a question about transparent
proxy. if i apply an ACL for downloading mp3 and mpeg. but it's not
working, user's are able to download mp3 or mpeg...
here is my config..squid.conf file.
port 8080
acl blocksites url_regex "/etc/squid/squid-block.
Is there a way I could control access to various sites based on user
irregardless of workstation they are on? All in transparent proxy.
Thanks in advance
How do I get the "Automatically detect settings" checkbox in Internet
Explorer to work with squid without manually entering proxy settings for
users? Or how do I get transparent proxy to work without using squid as a
default gateway? I'm using a Cisco 1600 for the default gateway.
_
I just enabled httpd_accelerator and those option on squid.conf for
transparent proxying, i have setup iptables so that anyone wishes to bypass
squid (direct connection) will be trap by iptables' PREROUTING and send them
back 3128, but cant access the page..
While trying to retrieve the URL: http:
Hi All
Nowaday I'm using squid 2.5.1 w/ Conectiva Linux.
It's all running smothtly w/ iptables + squid + squid ( transparent) +
DHCP + SARG
My question.
Is it possible to have all reports generated by SARG w/ user ID instead
IP address??
I've been reading about external_acl_type. Is it the rigth
Greetings friends!
I would like to ask something again.
I'm really a newbie and I am quite confused.
I was able to successfully install and use squid without iptables.
All I had to do was configure the browser to point to my squid server.
Now what is Transparent Proxy? What is it for?
I read in
Hi all,
I'm trying to setup a transparent proxy squid 3.3.9 using the following URL:
http://www.broexperts.com/2013/03/squid-as-transparent-proxy-on-centos-6-4/
What's the difference between
http_port 3128 transparent
and
http_port 3128
If I where to configure with http_port 3128 transparen
Hello
I can not get squid to work transparent.
I have the following in ipchains
-A input -p tcp -s 0/0 -d 0/0 80 -j REDIRECT 8080
-A input -p tcp -s 192.87.209.0/24 -d 0/0 80 -j REDIRECT 8080
And this in squid.conf
http_port 200.1.1.250:8080
httpd_accel_host virtual
httpd_accel_port 80
httpd_
How can I configure Squid to work as a transparent proxy?
Hi,
We are using Lucent Cellpipe 20 Series xDSL router and users are on
Win9x. Is there a way to use transparent proxy so that users cannot use
the router's LAN IP as gatewat?
Thanks.
Hi
I have installed squid-2.6.STABLE5. When changing the browser of the client
to use a proxy server my squid works but when I make the change to use it as
a transparent proxy I get the error FATAL: Received Segment
Violation...dying. and cannot get to any web pages.
I use Slackware 11 with kern
Hey everyone, got a problem I hope someone can help me with. I ve
searched thru the FAQ and the mail archive but I cant get any answer. I
hope im not 'floggin a dead horse' here but im running out of
alternatives. Im trying to run a transparent proxy on Red Hat Linux 9.
(squid-2.5.STABLE3-1rh)
Hi Squid users,
I'm trying to set Squid up to function as a transparent proxy without
success. I've got Squid 3 stable release 16. I'm running as root with
the cache_effective_user as squid (the owner of the squid directories
is squid).
I've setup iptables so that port 80 traffic gets sent to 312
On Wed, 06 Apr 2011 08:40:32 +1200, Mike Bordignon (GMI) wrote:
Hello
I'm using squid 3.1.6 on Debian Squeeze. I run two instances of squid
- on port 3128 and 3129. The instance on port 3128 services my LAN
clients, authenticating via Kerberos/negotiate. The other instance
acts as a transparent
Hi Guys;
I'm new one on the list so at the beginning I'd like to say hello to all
regular readers :)
I'm using squid (3.1.1 at this moment) in huge service and I'm wondering
about one think.
c) Can squid proxy SSL requests transparently ?
Yes. But only for one definition of "transparent
On 06/04/11 20:28, Paweł Mojski wrote:
Hi Guys;
I'm new one on the list so at the beginning I'd like to say hello to all
regular readers :)
I'm using squid (3.1.1 at this moment) in huge service and I'm wondering
about one think.
c) Can squid proxy SSL requests transparently ?
Yes. But on
Hi,
I have a firewall which also serves as a transparent proxy
system. So all forward 80 ports are sent to the localhost(I
think)'s 3129 port.
I've read
http://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxRedirect,
and my netfilter rules are:
LO_REDIRECT=3129
$IPTB -t nat -A PREROUTING -
On 01.02.2012 12:17, jp_listero wrote:
Hi all,
I'm at opensuse 12.1 ... with his susefirewall2 ...
I configure a transparent proxy ... all most everything works fine
...
when I try to connect a https site I have different errors:
from messages:
Jan 31 21:12:26 ladificil squid[2588]: parseHttp
thanks amos,
so, the server side configuration is fine ... and the browser must set
to auto-detect the proxy. Is that correct ?
2012/1/31 Amos Jeffries :
> On 01.02.2012 12:17, jp_listero wrote:
>>
>> Hi all,
>>
>> I'm at opensuse 12.1 ... with his susefirewall2 ...
>> I configure a transparent
On 1/02/2012 11:53 p.m., jp_listero wrote:
thanks amos,
so, the server side configuration is fine ... and the browser must set
to auto-detect the proxy. Is that correct ?
Yes.
Amos
Hi,
i have configured transparent proxy sometimes for the local network
LAN, but
now i want to actually control the output traffic from the machine running the
squid itself without have to configure manually browsers and other network
programs, i can't get it to work using iptables, what r
On 8/19/2012 10:00 PM, Roman Gelfand wrote:
My goal is to make suid as transparent proxy. I see several options.
Not sure which one I should be using. I am looking for standard
transparent proxy server.
--enable-ipfw-transparent or --enable-ipf-transparent or --enable-pf-transparent
Thank
debian/2.6.26-2-686
Thanks for your help
On Sun, Aug 19, 2012 at 3:14 PM, Eliezer Croitoru wrote:
> On 8/19/2012 10:00 PM, Roman Gelfand wrote:
>>
>> My goal is to make suid as transparent proxy. I see several options.
>> Not sure which one I should be using. I am looking for standard
>> tr
On 8/19/2012 10:18 PM, Roman Gelfand wrote:
debian/2.6.26-2-686
Thanks for your help
Then "ip|ipfw"ipf" in not of your concern.
you need linux-netfilter.
Regards,
Eliezer
--
Eliezer Croitoru
https://www1.ngtech.co.il
IT consulting for Nonprofit organizations
eliezer ngtech.co.il
On 27/08/2012 10:38 a.m., Roman Gelfand wrote:
Assuming that configuring client browsers' proxy is not a problem, is
there a good (where good overweighs bad) reason to use squid
transparent proxy feature?
The only other usefulness is to catch unconfigured clients and redirect
them at a "how to
> On 9/21/07, Netmail <[EMAIL PROTECTED]> wrote:
> > Hi guys
> > I'm configuring the transparent proxy but i have a difficulty ...
> > The Intercepition don't' work if configure only
> > http_port 3128 transparent ?
> >
> > I must shape the iptables by force?
pls see below
http://www.squid-cac
ot;Indunil Jayasooriya" <[EMAIL PROTECTED]>
To: Netmail <[EMAIL PROTECTED]>
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Transparent proxy
Date: Fri, 21 Sep 2007 15:31:59 +0530
> > On 9/21/07, Netmail <[EMAIL PROTECTED]> wrote:
> > > Hi guys
&
ED]
> Sent: Thursday, November 01, 2007 2:47 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] transparent Proxy
>
> Hi List,
> I'm new to this list. i have a question about transparent
> proxy. if i apply an ACL for downloading mp3 and mpeg. but it
Thomas Raef wrote:
You need to apply your acls with some deny statements.
http_reply_access deny blockfiles for your mp3's, etc.
To block websites I use dstdomain instead of url_regex.
So my squid.conf contains:
acl blocksites dstdomain "/etc/squid/squid-block.acl"
http_access deny block
to:[EMAIL PROTECTED]
Sent: Thursday, November 01, 2007 2:47 AM
To: squid-users@squid-cache.org
Subject: [squid-users] transparent Proxy
Hi List,
I'm new to this list. i have a question about transparent
proxy. if i apply an ACL for downloading mp3 and mpeg. but it's not
working, us
> Thomas Raef wrote:
> > You need to apply your acls with some deny statements.
> >
> > http_reply_access deny blockfiles for your mp3's, etc.
> >
> > To block websites I use dstdomain instead of url_regex.
> >
> > So my squid.conf contains:
> >
> > acl blocksites dstdomain "/etc/squid/squid-block.
> Thomas Raef wrote:
> > You need to apply your acls with some deny statements.
> >
> > http_reply_access deny blockfiles for your mp3's, etc.
>
> > To block websites I use dstdomain instead of url_regex.
> >
> > So my squid.conf contains:
> >
> > acl blocksites dstdomain "/etc/squid/squid-block.a
Tarak Ranjan wrote:
Thomas Raef wrote:
You need to apply your acls with some deny statements.
http_reply_access deny blockfiles for your mp3's, etc.
To block websites I use dstdomain instead of url_regex.
So my squid.conf contains:
acl blocksites dstdomain "/etc/squid/squid-block.acl"
h
ok. it's seems to me that it's working. i have another issue for this
. while manually in my browser if i select proxy then the acl's are
working fine . when i select Auto detect that time it's not working,
in the sense acl's are hot hitting. although i've disable "allow_direct"
okay, so
[Tom replied with:]
More information about your configuration is needed.
Are you using a transparent proxy? If not, then your users could easily
add their own proxy settings and bypass squid. If you are using squid in
transparent mode, then your firewall rules redirecting port 80 traffic
to s
On 01.11.07 13:16, Tarak Ranjan wrote:
> I'm new to this list. i have a question about transparent
> proxy. if i apply an ACL for downloading mp3 and mpeg. but it's not
> working, user's are able to download mp3 or mpeg...
> here is my config..squid.conf file.
> port 8080
> acl block
hi all,
I've FC8 Box running as firewall-proxy.
this is my first try to run this kind of box. But there is some
problems. iptables have simply 2 basic sentence.
but Transparent proxy doesn't work
iptables 1.3.8
iptables -X
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -j MASQUERADE
iptables
Dear All
Could you please guide me in order to configure authentication for
transparent proxy in squid?
Regards
Amir.
On Wednesday 07 August 2013 at 21:02:53, Roman Gelfand wrote:
> Is there a way I could control access to various sites based on user
> irregardless of workstation they are on? All in transparent proxy.
If it's transparent, you can't get authentication credentials (username /
password).
Since y
El 07/08/13 16:02, Roman Gelfand escribió:
Is there a way I could control access to various sites based on user
irregardless of workstation they are on? All in transparent proxy.
Thanks in advance
I did this a long time ago.
I had a terminal server, so all the users came from the same IP.
I
On 8/08/2013 11:38 p.m., Alfredo Rezinovsky wrote:
El 07/08/13 16:02, Roman Gelfand escribió:
Is there a way I could control access to various sites based on user
irregardless of workstation they are on? All in transparent proxy.
Thanks in advance
I did this a long time ago.
I had a termina
how many ports do you have available on the Cisco?
can you place squid inline after the router? then you would only have
to change your routers default gateway.
--jeff
On Wednesday, March 12, 2003, at 02:29 PM, Devon Harding - GTHLA wrote:
How do I get the "Automatically detect settings" checkb
: '[EMAIL PROTECTED]'
Subject: [squid-users] Transparent Proxy
How do I get the "Automatically detect settings" checkbox in Internet
Explorer to work with squid without manually entering proxy settings for
users? Or how do I get transparent proxy to work without using squid as
a
d
your cisco ios has to support wccp and then you need to compile your squid
server with the --enable-linux-netfilter. once thats done, you need to
compile the ip_wccp.c kernel module (do a google for it) with the command
this is all one line by the way ---
Chad,
Will that gcc string work on any Linux OS or a specific one?
> -Original Message-
> From: Chad Whitten [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, March 12, 2003 2:44 PM
> To: Devon Harding - GTHLA
> Cc: '[EMAIL PROTECTED]'
> Subject: Re: [sq
these parameters are specific to kernel and os arhitecture
> Will that gcc string work on any Linux OS or a specific one?
pauloric wrote:
> Is it possible to have all reports generated by SARG w/ user ID instead
> IP address??
Only if you can make a scheme whereby the user ID can be found from the
IP address.
> I've been reading about external_acl_type. Is it the rigth way?
If you find the solution to the above pr
Em Sex, 2003-03-28 às 19:07, Henrik Nordstrom escreveu:
> pauloric wrote:
>
> > Is it possible to have all reports generated by SARG w/ user ID instead
> > IP address??
>
> Only if you can make a scheme whereby the user ID can be found from the
> IP address.
>
> > I've been reading about externa
pauloric wrote:
>
> Em Sex, 2003-03-28 às 19:07, Henrik Nordstrom escreveu:
> > pauloric wrote:
> >
> > > Is it possible to have all reports generated by SARG w/ user ID instead
> > > IP address??
> >
> > Only if you can make a scheme whereby the user ID can be found from the
> > IP address.
> >
>
fritz,
i too am a newbie, so this is how i understand transparent proxy. as stated by daniel kiracofe, you
use transparent proxy if you like all clients to use the proxy without having to go to the trouble
of configuring each browser to point to the proxy, just like what you did. if you don't p
TECTED]
> Sent: Friday, August 29, 2003 9:37 AM
> To: Fritz Mesedilla
> Cc: [EMAIL PROTECTED]
> Subject: Re: [squid-users] Transparent proxy
>
>
> fritz,
>
> i too am a newbie, so this is how i understand transparent
> proxy. as stated by daniel kiracofe, you
>
On Friday 29 August 2003 03.37, Dodjie Nava wrote:
> dial-up clients & 1000 workstations, would you rather tell each one
> of them to configure their browser to point to your proxy? not a
> good idea coz you have a far better alternative: a transparent
> proxy, which will intercept the request
T
On Friday 29 August 2003 06.56, Fritz Mesedilla wrote:
> Will it still be possible to make them pass through the linux box
> as a transparent proxy?
Not if you use authentication at the proxy. As said transparent
proxying is a bandaid, not a universal solution.
There is also several other limit
Thank you all for the help!
I have decided to implement squid... simple squid with acl to my network behind an
iptables firewall.
I somehow learned to use iptables on its own with your help as well.
At first squid wasn't running properly behind a firewall. It was a mere configuration
problem w
On 30/11/2013 10:26 a.m., Monah Baki wrote:
> Hi all,
>
>
> I'm trying to setup a transparent proxy squid 3.3.9 using the following URL:
>
>
> http://www.broexperts.com/2013/03/squid-as-transparent-proxy-on-centos-6-4/
>
> What's the difference between
>
> http_port 3128 transparent
The abov
Hi Amos,
Thanks for the explanation. I switched to intercept yet once I restart
squid, I am still seeing the "No forward proxy ports configured".
The same machine later on will also be running IPtables since it has 2
NIC's in it.
Monah
On Sat, Nov 30, 2013 at 4:56 AM, Amos Jeffries wrote:
>
On 11/30/2013 03:33 PM, Monah Baki wrote:
Hi Amos,
Thanks for the explanation. I switched to intercept yet once I restart
squid, I am still seeing the "No forward proxy ports configured".
The same machine later on will also be running IPtables since it has 2
NIC's in it.
You need both one 'inte
Thanks, error went away. All remains is my IPTable rules.
On Sat, Nov 30, 2013 at 7:45 AM, Pavel Kazlenka
wrote:
> On 11/30/2013 03:33 PM, Monah Baki wrote:
>>
>> Hi Amos,
>>
>> Thanks for the explanation. I switched to intercept yet once I restart
>> squid, I am still seeing the "No forward prox
Hello,
I've configured a transparent proxy as TProxy4
(http://wiki.squid-cache.org/Features/Tproxy4).
But I don't see anything in squid access log.
* OS = Linux Fedora 20.
* Cache log says at start-up :
2014/02/19 12:23:53 kid1| Accepting WCCPv2 messages on port 2048, FD 11.
2014/02/19
[EMAIL PROTECTED] wrote:
Hello
I can not get squid to work transparent.
I have the following in ipchains
-A input -p tcp -s 0/0 -d 0/0 80 -j REDIRECT 8080
-A input -p tcp -s 192.87.209.0/24 -d 0/0 80 -j REDIRECT 8080
And this in squid.conf
http_port 200.1.1.250:8080
httpd_accel_host virtual
httpd
Ok, I have squid and dansguardian setup and running. If I configure my
client pc to use its IP address for as a proxy, it works fine, and I can
see the various entries both in squids and dansguardians log files.
However, when I try to force it to transparently proxy, it does not work.
I do see the
Hello,
Is it possible to have any sort of
authentication with squid running as
transparent proxy.
Thanks
Varun
$router /firewall/gateway = openbsd + PF
$squidserver = freebsd
and $desktops
I had squid installed on my $router for the time being and got a much
faster machine for my $squidserver... I pretty much copied my
squid.conf to the new server with some editing to match addresses...
I setup
>... I can do direct proxying if I specify the proxy server on a machine,
>this works. But it will be tedious to upgrade all desktops to do this
>and not to mention complaints if someone tampers with it or why this
>needs to be done or new machines being added...
I understan
Hello!
I have a little problem with transparent proxy, i hope, you can help me.
I have a proxy server with 2 eth interfaces.
I setted up the bridge, squid, dansguardian, and iptables, this works
transparent proxy. But i have power failure and the server shut down.
When restarted the transparent
> How can I configure Squid to work as a transparent proxy?
>
Documented, in depth, in the FAQ...
M.
> I searched the Whole FAQ and I didn't find any documentation that tells how
> to configure SQUID to work as an transparent proxy.
>
http://www.squid-cache.org/Doc/FAQ/FAQ-17.html
M.
We make our users , use the proxy through proxy settings in the browser.
This is one of those cases where a seemingly good word , hides
a bad concept.
There are many caveats of transparant proxying :
- Intercepting HTTP breaks TCP/IP standards because user agents
think they are talking directly
Hi I have installed squid on a debian sarge system which is running off a
usb key. Two questions:
a) can I run squid the squid cache off the memory alone as to not age the
usb key, as I am mainly using squid for squid-guard? Also when cahce with
the usb key it seems a little slow?
b) have tried
Is there anyone who can able to use the online booking future of wizzair.com
I receive an empty page every time.
I tried theno_cache deny wizzar directive and clearing the cache.
Still getting an empty result page for any request.
The only way it works if I use a prerouting rule in my firewal
Hi All,
I am using squid to run as a transparent proxy
for traffic heading to port 80. From the documentation
I understand that in such a case, the HTTP Accelerator
runs on port 80 and hence I can't reuse the same port
for my local web server(eg:- Jetty).
But I want to run Jetty on port 8
Hello!
I'm planning to use squid as a transparent proxy for
my LAN.
I now squid can't act as a transparent proxy when
using the HTTPS protocol and it even registers this
kind of access in my access.log file.
So, can I register this kind of access in my
access.log file or I just have to let this pro
Hi guys,
I try to implement a transparent proxy using squid 2.5 in Redhat 9 platform,
but I can't make the transparent proxy function properly although I follow
what state in the books web caching does.
My iptables rules as below:
Iptables -t nat -A PREROUTING -I eth0 -s ! 172.12.3.8 -p tcp --dpo
> Hi,
>
> We are using Lucent Cellpipe 20 Series xDSL router and users are on
> Win9x. Is there a way to use transparent proxy so that users
> cannot use
> the router's LAN IP as gatewat?
>
That's unrelated. It's still possible to intercept http traffic
even if the default gateway at IP
can someone point me to a good howto for setting up a transparent proxy
with client authentication? i want to make an anonymous proxy so my
clients can surf anonymously, is a transparent proxy what i want?
thanks
nick
The following accesses fail to show up using IE6 and transparent proxy.
= These are accesses to download an attachment from a hotmail message.
The = screen is blank. It works fine if I configure a non-transparent
proxy. Haven't = tried it with other browsers. I'm using 2.5-stable7.
1104368893.994
Dear Sir/Madam,
I am running Squid-2.5.STABLE-6.3E.16 on Linux
Kernel Version 2.4.21-40.EL with Transparent Proxy
enabled. I am running WccpV1 on Cisco IOS ver 12.x..
I am not able to see the cache engine from my router
which is leading all the http request to go directly..
How do i trouble
tor 2006-11-16 klockan 14:53 +0200 skrev Isak Badenhorst:
> I have installed squid-2.6.STABLE5. When changing the browser of the client
> to use a proxy server my squid works but when I make the change to use it as
> a transparent proxy I get the error FATAL: Received Segment
> Violation...dying.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Isak,
Have you tried using the iptables command as below:
iptables -t nat -A PREROUTING -p tcp -s x.x.x.x/24 --dport 80 -j
REDIRECT --to-port 3128
I used to have this kind of problem some 2 years ago.
On Thu, 16 Nov 2006 14:53:43 +0200
"Isak
iptables -t nat -A PREROUTING -p tcp -s x.x.x.x/24 --dport 80 -j DNAT
--to-destination xxx.xxx.xxx.xxx:3128
On 11/16/06, Tek Bahadur Limbu <[EMAIL PROTECTED]> wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Isak,
Have you tried using the iptables command as below:
iptables -t nat -
I am running Squid 2.6STABLE13 as a transparent proxy. I am running
into troubles with it downloading updates to messenger for yahoo.
Some users seem to download the patch file or whatever automatically.
As soon as its done downloading they just download again in an endless
loop all day long.
An
Hi,
I have transparent proxy running pretty well
and caching ok.
I'm not sure where to post, but since
it is also a squid configuration issue, I'd
try here.
Currently, all outgoing port 80 calls are
being routed (via iptables) to the squid
box and then routed back through to the
routing machine
Hello All!
I know it very well that the problem i am seeking help about is not squid
related but as i am so desperate thats why i am asking this question here.
my squid 2.5 Stable 4 is running very fine, iptables is redirecting the port
80 to port 8080 but clients accessing https sites like hotm
Hello List,
I have a problem with a transparent squid cache, which I made using the
regular REDIRECT target for all http traffic to destination port 80. The
thing is, the cache works fine with the proxy port specified in the
browsers of all the windows machines (unfortunately only windows clients
For some reason, a linux client works fine with konqueror, mozilla-firefox and lynx...
however, IE 6.x just hangs
ideas?
Thanks,
Mark
pgp0.pgp
Description: PGP signature
Hello, Folks -
I have been using squid/squidGuard on our proxy servers here at the library I
work at for about a year and a half, and have been having great success with
them.
I am now trying to set up a transparent proxy for a new wireless network so
that we can let folks bring in there lapt
Adam Jackson wrote:
Hi Squid users,
I'm trying to set Squid up to function as a transparent proxy without
success. I've got Squid 3 stable release 16. I'm running as root with
the cache_effective_user as squid (the owner of the squid directories
is squid).
I've setup iptables so that port 80 tr
On Mon, 22 Jun 2009 15:11:28 +0100, Adam Jackson
wrote:
> On Mon, Jun 22, 2009 at 12:24 PM, Amos Jeffries
> wrote:
>
>> Adam Jackson wrote:
>>
>>> Hi Squid users,
>>>
>>> I'm trying to set Squid up to function as a transparent proxy without
>>> success. I've got Squid 3 stable release 16. I'm run
OS: CentOS 5,5, 2.6.18-194.26.1.el5
Squid 2.6.STABLE21 (from repo, with --enable-wccpv2 options)
Cisco 7201 (Cisco IOS Software, 7200 Software (C7200P-IK91S-M),
Version 12.2(31)SB17, RELEASE SOFTWARE (fc1), image file
c7200p-ik91s-mz.122-31.SB17.bin)
I can not configure a transparent proxy.
I here
On 20/04/11 16:18, cc wrote:
Hi,
I have a firewall which also serves as a transparent proxy
system. So all forward 80 ports are sent to the localhost(I
think)'s 3129 port.
I've read
http://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxRedirect,
and my netfilter rules are:
LO_REDIRECT=31
Hi Amos,
Amos Jeffries wrote:
>> LO_REDIRECT=3129
>> $IPTB -t nat -A PREROUTING -i $INET_IF -s $INET_IP -p tcp \
>>--dport $HTTP -j ACCEPT
>> $IPTB -t nat -A PREROUTING -i $DMZ_IF -p tcp -s $LAN_NET --dport $HTTP \
>> -j REDIRECT --to-ports $LO_REDIRECT
On 20/04/11 18:19, cc wrote:
Hi Amos,
Amos Jeffries wrote:
LO_REDIRECT=3129
$IPTB -t nat -A PREROUTING -i $INET_IF -s $INET_IP -p tcp \
--dport $HTTP -j ACCEPT
$IPTB -t nat -A PREROUTING -i $DMZ_IF -p tcp -s $LAN_NET --dport $HTTP \
-j REDIRECT --to-
Amos Jeffries wrote:
> Only if the first of those rules is broken.
>
> ... -i $INET_IF -s $INET_IP matches traffic from another machine called
> $INET_IP outside the current box.
Hi Amos,
I don't seem to be getting anywhere.
Given that I redirect all outgoing port 80 traffic to the localhost:3
On 20/04/11 19:49, cc wrote:
Amos Jeffries wrote:
Only if the first of those rules is broken.
... -i $INET_IF -s $INET_IP matches traffic from another machine called
$INET_IP outside the current box.
Hi Amos,
I don't seem to be getting anywhere.
Given that I redirect all outgoing port 80
Dear all,
I try to configure a transparent web proxy through squid 3, here is
the network topology
Users -> Switch -> Internet
Users means a couple of PCs, all of them have public IP, all of them
are connected to a switch. One PC among them is designed to be a proxy
machine. The switch is progra
1 - 100 of 572 matches
Mail list logo
