Hy all!
Again the weird trnasparent proxying problem. I revised all docs found
on the net, but no solution yet. Debian SARGE system, with kernel
2.6.9, no patches. routing, and iptables enabled. squid compiled from
source, with options:

$CONFIGURE --with-dl --enable-default-err-language=Hungarian --enable-poll 
--enable-select --disable-http-violations --enable-linux-nefilter \
--disable-ident-lookups --enable-delay-pools --enable-gnuregex --sysconfdir=/etc/squid 
--prefix=/usr/local/squid --enable-underscores \
--enable-time-hack  --with-samba-sources=/root/install/unpacked/samba-3.0.7 
--enable-cache-digests --sysconfdir=/etc/squid --enable-storeio=ufs,diskd \
--disable-icp --enable-dl-malloc

If not used with transparent proxying it just work fine... But now I'd
need to be transparent...

In /etc/network/services: ip_forward=yes

and already configured my squid and firewall:

$IPTABLES -t nat -A PREROUTING -p tcp -i $LAN_KOLL_IFACE -s $LAN_KOLL_NET --dport 80 
-j REDIRECT --to-ports 3113
(I have static IP, so no MASQUERADING, but SNAT used:
$IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -j SNAT --to-source $INET_IP)

Squid starts normally, says:
2004/11/03 03:03:59| Accepting transparently proxied HTTP connections at 10.2.254.1, 
port 3113, FD 11.
2004/11/03 03:03:59| WCCP Disabled.
2004/11/03 03:03:59| Ready to serve requests.

Just after I do the first hit, the
 WARNING: transparent proxying not supported
message appears at the end of the cache.log, and the client has the
message, that says, the "/" is an invalid url. in the access log I
see:
1099446498.298      1 10.2.0.1 NONE/400 1514 GET / - NONE/- text/html
1099447470.783      1 10.2.0.1 NONE/400 1514 GET / - NONE/- text/html
1099447497.574      0 10.2.0.1 NONE/400 1514 GET / - NONE/- text/html

What's this, and where to from here?

-- 
Thomas Elias
Title: System administrator, Programmer
mailto: [EMAIL PROTECTED]
Tel.: +3630/3299315
ICQ UIN: 206-714-459
Quote: "Too many people making too many problems (InFlames)"

Reply via email to