Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Jun 2008 16:20:52 -0700
From:      David Martens <dmartens@fresnochristian.com>
To:        freebsd-ipfw@freebsd.org
Subject:   fwd problem
Message-ID:  <2D6927C5-B7C7-454B-83E0-FAD76878356C@fresnochristian.com>

next in thread | raw e-mail | index | archive | help
I'm trying to set up a transparent proxy using two machines,  the  
gateway and the proxy.  The proxy is 192.168.3.22 and is listening on  
port 8082.  The gateway is 192.168.0.1, subnet is 255.255.252.0 so  
everything is on the same subnet.

I set the following rules on the gateway:

00100 allow ip from any to any via lo0
00110 deny ip from any to 127.0.0.0/8 via en0
00800 divert 8668 ip from any to any via en0
00850 deny ip from any to any in frag
00990 fwd 192.168.3.22 tcp from 192.168.1.0/24 to any 80

When I get a packet count (ipfw -a list) rule 990 increments when I  
try to access a web page.

On the proxy box I have the following rules:

00100 allow tcp from 192.168.3.22 to any
00110 fwd 127.0.0.1,8082 tcp from 192.168.0.1/22 to any dst-port 80

rule 110 never receives any forwarded packets. Any ideas what I've  
done wrong here? The http requests do go out, but are not forwarded  
through the proxy.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2D6927C5-B7C7-454B-83E0-FAD76878356C>