From owner-freebsd-questions  Thu Feb  1 13:13:45 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from syncopation-03.iinet.net.au (syncopation-03.iinet.net.au [203.59.24.49])
	by hub.freebsd.org (Postfix) with SMTP id 211C937B503
	for <questions@freebsd.org>; Thu,  1 Feb 2001 13:13:20 -0800 (PST)
Received: (qmail 1613 invoked by uid 666); 1 Feb 2001 21:21:24 -0000
Received: from reggae-03-33.nv.iinet.net.au (HELO elischer.org) (203.59.78.33)
  by mail.m.iinet.net.au with SMTP; 1 Feb 2001 21:21:24 -0000
Message-ID: <3A79D157.A18270EB@elischer.org>
Date: Thu, 01 Feb 2001 13:12:55 -0800
From: Julian Elischer <julian@elischer.org>
X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 5.0-CURRENT i386)
X-Accept-Language: en, hu
MIME-Version: 1.0
To: mi@aldan.algebra.com
Cc: questions@freebsd.org, net@freebsd.org
Subject: Re: transparent proxying through a separate machine
References: <200102012103.f11L3nP50702@misha.privatelabs.com>
Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

mi@aldan.algebra.com wrote:
> 
> Hello!
> 
> We have a single firewall machine and a _separate_ machine running
> squid proxy (both servers are on the same network wire).
> 
> How do I catch all of the outgoing http requests and send them through
> squid?
> 
> I tried
> 
>         ipfw add fwd squid,3128 tcp from any to any http
> 
> but it does not seem to work -- squid never gets contacted. All of the
> recipes out there describe the setups with squid and the firewall being
> on the same machine. What else do I need to do? Thanks!

I assume squid is the name of the other machine?
you need to have the same rule in the ipfw on that machine too.

otherwise it will reflect the packet back at it's original destination
as it still has headers saying it wants to go there. (It's unaltered).



> 
>         -mi
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

-- 
      __--_|\  Julian Elischer
     /       \ julian@elischer.org
    (   OZ    ) World tour 2000-2001
---> X_.---._/  
            v


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message