From owner-freebsd-stable@FreeBSD.ORG Tue Apr 17 11:09:39 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 0298416A401 for ; Tue, 17 Apr 2007 11:09:39 +0000 (UTC) (envelope-from max@love2party.net) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.174]) by mx1.freebsd.org (Postfix) with ESMTP id 8890313C459 for ; Tue, 17 Apr 2007 11:09:38 +0000 (UTC) (envelope-from max@love2party.net) Received: from [88.64.191.130] (helo=amd64.laiers.local) by mrelayeu.kundenserver.de (node=mrelayeu5) with ESMTP (Nemesis), id 0ML25U-1HdlYi27II-0007SB; Tue, 17 Apr 2007 13:09:18 +0200 From: Max Laier Organization: FreeBSD To: freebsd-stable@freebsd.org Date: Tue, 17 Apr 2007 13:09:09 +0200 User-Agent: KMail/1.9.5 References: <46247471.9030503@tk-pttuntex.com> In-Reply-To: <46247471.9030503@tk-pttuntex.com> X-Face: ,,8R(x[kmU]tKN@>gtH1yQE4aslGdu+2]; R]*pL,U>^H?)gW@49@wdJ`H<=?utf-8?q?=25=7D*=5FBD=0A=09U=5For=3D=5CmOZf764=26nYj=3DJYbR1PW0ud?=>|!~,,CPC.1-D$FG@0h3#'5"k{V]a~.<=?utf-8?q?mZ=7D44=23Se=7Em=0A=09Fe=7E=5C=5DX5B=5D=5Fxj?=(ykz9QKMw_l0C2AQ]}Ym8)fU MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2443086.Yx2KudcSDS"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200704171309.15391.max@love2party.net> X-Provags-ID: V01U2FsdGVkX19e3wJt04LXWzGLxd5C2mcNLtv2ugTHHA2Hj65 IL0jz7gmnEXkUXCzQxAb5fJGub/mbQbj7UJnFjXL3+/lAUblJj 0aPdvm7mwkd8QEJwd18Sw== Cc: Subject: Re: tproxy on freebsd X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Apr 2007 11:09:39 -0000 --nextPart2443086.Yx2KudcSDS Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Tuesday 17 April 2007 09:17, zen wrote: > i know it seem out of topic, > i recently build a proxy server to serve our small ISP, > but i'm facing a big problem. as far as i know FreeBSD didn't support > TPROXY like linux had. > but i need to build this proxy transparently so only my client ips that > visible when browsing. > i use ipnat and ipf with Squid latest stable release. > does anyone has experience building a true transparent proxy with > FreeBSD? please share the knowledge and the regarding this problems. http://www.benzedrine.cx/transquid.html is a tutorial for OpenBSD + pf +=20 squid, but almost the same steps are required for FreeBSD. If you build=20 squid from the portstree you should enable: [X] SQUID_PF Enable transparent proxying with PF or [ ] SQUID_IPFILTER Enable transp. proxying with IPFilter if you want to stay with ipf + ipnat. =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart2443086.Yx2KudcSDS Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (FreeBSD) iD8DBQBGJKrbXyyEoT62BG0RAgpfAJ9rR+AMLwAKbaSYw0Z6fM284+j3aACggBeY xqlCPlAzwyTWueo8mVMimcc= =fYtR -----END PGP SIGNATURE----- --nextPart2443086.Yx2KudcSDS--