From owner-freebsd-ipfw Mon Mar 4 22:12: 9 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from rwcrmhc54.attbi.com (rwcrmhc54.attbi.com [216.148.227.87]) by hub.freebsd.org (Postfix) with ESMTP id 729CC37B400 for ; Mon, 4 Mar 2002 22:12:05 -0800 (PST) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc54.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020305061204.IWVF1214.rwcrmhc54.attbi.com@blossom.cjclark.org>; Tue, 5 Mar 2002 06:12:04 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g256C3U89641; Mon, 4 Mar 2002 22:12:03 -0800 (PST) (envelope-from cjc) Date: Mon, 4 Mar 2002 22:12:03 -0800 From: "Crist J. Clark" To: Jeff Koftinoff Cc: freebsd-ipfw@FreeBSD.ORG Subject: Re: Transparent proxy for connections originating on localhost Message-ID: <20020304221203.Q87533@blossom.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <20020304213713.N87533@blossom.cjclark.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from jeffkoftinoff@mac.com on Mon, Mar 04, 2002 at 09:50:37PM -0800 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Mar 04, 2002 at 09:50:37PM -0800, Jeff Koftinoff wrote: > > On Monday, March 4, 2002, at 09:37 PM, Crist J. Clark wrote: > > > On Mon, Mar 04, 2002 at 01:13:22PM -0800, Jeff Koftinoff wrote: > >> All I want > >> is for all web accesses done by programs on the local machine to be > >> redirected to the transparent proxy on the local machine. Only one > >> machine would be involved. Or should I be looking into 'divert' > >> sockets? Where would I learn more about those? > > > > Nope. 'fwd' is the right way to go for transparent proxying. But a > > webserver running on the same machine with the proxy won't work. > > > > Thank you very much for your reply. So is 'fwd'' the right way to go > for transparent proxying with the web browser and the proxy on the same > machine? I'm not sure why one would want to proxy connections to a webserver on the same machine. > With the same rule that I previously specified, when I try to > access a remote web site, the 'fwd' rule blocks my connection and does > not forward to 127.0.0.1:9999. The browser (links) just hangs on 'Making > connection'. and 'ipfw show' shows the counter increase. Hmmm... I thought you said it was working. I'm not clear on what is and is not working. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message