Date: Thu, 01 Feb 2001 13:15:04 -0800 From: Julian Elischer <julian@elischer.org> To: mi@aldan.algebra.com Cc: questions@freebsd.org, net@freebsd.org Subject: Re: transparent proxying through a separate machine Message-ID: <3A79D1D8.3FC5BF70@elischer.org> References: <200102012103.f11L3nP50702@misha.privatelabs.com>
next in thread | previous in thread | raw e-mail | index | archive | help
mi@aldan.algebra.com wrote:
>
> Hello!
>
> We have a single firewall machine and a _separate_ machine running
> squid proxy (both servers are on the same network wire).
>
> How do I catch all of the outgoing http requests and send them through
> squid?
>
> I tried
>
> ipfw add fwd squid,3128 tcp from any to any http
>
> but it does not seem to work -- squid never gets contacted. All of the
> recipes out there describe the setups with squid and the firewall being
> on the same machine. What else do I need to do? Thanks!
Oh yeah, you need to make you rules only catch the packets from the
clients, otherwise you will catch your own cache requests from squid.
so you must allow the requests from 'squid' to avoid being forwarded
back to squid..
>
> -mi
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message
--
__--_|\ Julian Elischer
/ \ julian@elischer.org
( OZ ) World tour 2000-2001
---> X_.---._/
v
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A79D1D8.3FC5BF70>