Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 Apr 2007 13:09:09 +0200
From:      Max Laier <max@love2party.net>
To:        freebsd-stable@freebsd.org
Subject:   Re: tproxy on freebsd
Message-ID:  <200704171309.15391.max@love2party.net>
In-Reply-To: <46247471.9030503@tk-pttuntex.com>
References:  <46247471.9030503@tk-pttuntex.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart2443086.Yx2KudcSDS
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Tuesday 17 April 2007 09:17, zen wrote:
> i know it seem out of topic,
> i recently build a proxy server to serve our small ISP,
> but i'm facing a big problem. as far as i know FreeBSD didn't support
> TPROXY like linux had.
> but i need to build this proxy transparently so only my client ips that
> visible when browsing.
> i use ipnat and ipf with Squid latest stable release.
> does anyone has experience building a true transparent proxy with
> FreeBSD? please share the knowledge and the regarding this problems.

http://www.benzedrine.cx/transquid.html is a tutorial for OpenBSD + pf +=20
squid, but almost the same steps are required for FreeBSD.  If you build=20
squid from the portstree you should enable:

 [X] SQUID_PF             Enable transparent proxying with PF

or

 [ ] SQUID_IPFILTER       Enable transp. proxying with IPFilter

if you want to stay with ipf + ipnat.

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart2443086.Yx2KudcSDS
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (FreeBSD)

iD8DBQBGJKrbXyyEoT62BG0RAgpfAJ9rR+AMLwAKbaSYw0Z6fM284+j3aACggBeY
xqlCPlAzwyTWueo8mVMimcc=
=fYtR
-----END PGP SIGNATURE-----

--nextPart2443086.Yx2KudcSDS--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200704171309.15391.max>