Date: Tue, 29 Mar 2011 09:26:43 -0700 From: Patrick <gibblertron@gmail.com> To: freebsd-pf@freebsd.org Subject: Re: Lost in rules! Message-ID: <AANLkTi=vUpmVR5SZv-2AaQdgBxqH4dsU3J=yDrPdJWnd@mail.gmail.com> In-Reply-To: <4D91BF90.2080608@eskk.nu> References: <4D8E11CB.2070501@eskk.nu> <4D90075A.3030300@gmail.com> <4D91BF90.2080608@eskk.nu>
next in thread | previous in thread | raw e-mail | index | archive | help
Just wanted to confirm that you compiled Squid with SQUID_PF set... On Tue, Mar 29, 2011 at 4:16 AM, Leslie Jensen <leslie@eskk.nu> wrote: > > > On 2011-03-28 05:58, Vilem Kebrt wrote: >> >> Dne 26.3.2011 17:18, Leslie Jensen napsal(a): >>> >>> block drop in log quick proto ipv6 all >>> >>> block drop out log quick proto ipv6 all >> >> Hi Leslie, >> imho these rules will "drop random everything" , definition of ipv6 in >> PF is inet6 :) and they are quick so no other rules aply. >> >> block drop in on $ext_if inet6 all >> block drop out on $ext_if inet6 all >> >> should be these rules i think. >> William >> > > Thank you! > > That cured some of the problem. > > The remaining problem is that the squid transparency is not working. > I can set proxy in my browser and it will use squid. But it seems that my > rdr rule is no used. > > I've tried starting squid manually with squid -NCd10 but there's no > indication of any errors. > > I'm also running > =A0tcpdump -s 256 -n -e -tttt -i pflog0 > > But I cannot see any of the outgoing packets getting detected by pf and s= ent > to the proxy. > > Do you have any suggestions on how to log more information? > > Thanks > > /Leslie > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTi=vUpmVR5SZv-2AaQdgBxqH4dsU3J=yDrPdJWnd>