From owner-freebsd-questions Sat Dec 7 11:35:40 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0405C37B401 for ; Sat, 7 Dec 2002 11:35:39 -0800 (PST) Received: from charter.net (dhcp-220-8.slidell.charter-ala.com [24.158.214.244]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0EE9743EC2 for ; Sat, 7 Dec 2002 11:35:38 -0800 (PST) (envelope-from glennpj@charter.net) Received: from gforce.johnson.home (localhost [127.0.0.1]) by charter.net (8.12.6/8.12.6) with ESMTP id gB7JZQDn001171 for ; Sat, 7 Dec 2002 13:35:26 -0600 (CST) (envelope-from glenn@gforce.johnson.home) Received: (from glenn@localhost) by gforce.johnson.home (8.12.6/8.12.6/Submit) id gB7JZQSO001170 for questions@freebsd.org; Sat, 7 Dec 2002 13:35:26 -0600 (CST) From: Glenn Johnson Date: Sat, 7 Dec 2002 13:35:26 -0600 To: questions@freebsd.org Subject: need help setting up a transparent proxy Message-ID: <20021207193526.GA1123@gforce.johnson.home> Mail-Followup-To: questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.1i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I am trying to set up a transparent squid proxy with ipfw. I am using FreeBSD 4.7-STABLE (current as of today), version 2.5_1 of squid. I have read the relevant information on the squid Web site and searched the FreeBSD mail archive. I am pretty sure I have everything set up right but it just does not work. I have the following in my kernel config: options IPFIREWALL #firewall options IPFIREWALL_FORWARD #enable transparent proxy support options IPDIVERT #divert sockets options IPSTEALTH #support for stealth forwarding I have the following in my squid.conf file: http_port 3128 httpd_accel_port 80 httpd_accel_host virtual httpd_accel_with_proxy on httpd_accel_uses_host_header on I am using the "SIMPLE" firewall setup I have the following in my rc.firewall file # Allow setup of any other TCP connection ${fwcmd} add pass tcp from any to any setup # Try this to get a transparent proxy ${fwcmd} add fwd 127.0.0.1,3128 tcp from any to any 80 I have also tried setting the first rule above to "...any to any 80" but that did not help. What am I missing? Thanks. -- Glenn Johnson glennpj@charter.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message