From owner-freebsd-questions@FreeBSD.ORG  Sun Jun 15 21:25:14 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ABCD837B401
	for <freebsd-questions@freebsd.org>;
	Sun, 15 Jun 2003 21:25:14 -0700 (PDT)
Received: from s1.home.ro (home.rdsnet.ro [193.231.236.40])
	by mx1.FreeBSD.org (Postfix) with SMTP id 0569243FA3
	for <freebsd-questions@freebsd.org>;
	Sun, 15 Jun 2003 21:25:13 -0700 (PDT)	(envelope-from bsdwave@go.ro)
Received: (qmail 16660 invoked from network); 16 Jun 2003 04:25:09 -0000
Received: from unknown (HELO free) (81.196.89.85)
  by s1.go.ro with SMTP; 16 Jun 2003 04:25:09 -0000
Date: Mon, 16 Jun 2003 07:25:26 +0300
From: Rapier <bsdwave@go.ro>
To: freebsd-questions@freebsd.org
Message-Id: <20030616072526.1a25943a.bsdwave@go.ro>
In-Reply-To: <20030615234105.GD60583@athomson.prv.au.itouchnet.net>
References: <20030613070438.GO15745@athomson.prv.au.itouchnet.net>
	<3EE9D5DD.1090209@potentialtech.com>
	<20030615234105.GD60583@athomson.prv.au.itouchnet.net>
Organization: pG
X-Mailer: Sylpheed version 0.8.10claws (GTK+ 1.2.10; i386-portbld-freebsd5.1)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Re: more transparent proxy and squid questions.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jun 2003 04:25:15 -0000

	From what you've said you have natd enabled,instead of redirecting with ipfw you shoud redirect with natd!man natd


On Mon, 16 Jun 2003 09:41:05 +1000
Andrew Thomson <ajthomson@optushome.com.au> wrote:

> On Fri, Jun 13, 2003 at 09:47:09AM -0400, Bill Moran wrote:
> > 
> > Yes.  You've got the right idea.
> > 
> 
> hmm.. i have encountered some difficulties ;) so now i'm seeking some
> more advice..
> 
> i have the following rules on my firewall:
> 
> 10561 skipto 11000 ip from 192.168.1.2 to any
> 10562 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80
> 
> keeping in line with my example, 1=fwall, 2=squid, 3=user
> 
> the skipto is in there so we go through nat and get a proper ip.
> 
> i never see any packets get to the squid box though..
> 
> ipfw show indicates matching packets
> ipfw show 10561 10562
> 10561       5342        331306 skipto 11000 ip from 192.168.1.2 to any
> 10562       2520        120960 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80
> 
> a tcpdump on the squid box looking out for port 3128 shows nothing, although
> the ipfw shows matches..
> 
> i'll keep digging around but any more tips would be appreciated on this
> setup.
> 
> thanks,
> 
> andrew.
> 
> 
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"