From owner-freebsd-questions  Thu Feb 13  9:44:39 2003
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8A2BC37B401
	for <freebsd-questions@freebsd.org>; Thu, 13 Feb 2003 09:44:37 -0800 (PST)
Received: from mailout04.sul.t-online.com (mailout04.sul.t-online.com [194.25.134.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CC8F743F85
	for <freebsd-questions@freebsd.org>; Thu, 13 Feb 2003 09:44:35 -0800 (PST)
	(envelope-from 520023893678-0001@t-online.de)
Received: from fwd11.sul.t-online.de 
	by mailout04.sul.t-online.com with smtp 
	id 18jNPW-0007vt-0B; Thu, 13 Feb 2003 18:44:34 +0100
Received: from pD901723E.dip.t-dialin.net (520023893678-0001@[217.1.114.62]) by fwd11.sul.t-online.com
	with esmtp id 18jNPP-0bT3AWC; Thu, 13 Feb 2003 18:44:27 +0100
Date: Thu, 13 Feb 2003 18:44:24 +0100 (CET)
From: 520023893678-0001@t-online.de (P. U. Kruppa)
To: freebsd-questions@FreeBSD.ORG
Subject: squid and ipfw ... fwd ...
Message-ID: <20030213183028.S681@small.pukruppa.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Sender: 520023893678-0001@t-dialin.net
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hi!

I am trying to setup a transparent proxy with Squid.

Proxying and caching itself works fine (thanks to the help of
this list!) - my Squid is listening on port 80.

I have got the ipfw kernel module running and seem to be able to
change all kinds of rules via ipfw or from bootup via some
firewall configuration file. As all kinds of manuals advise I do
# ipfw add 200 allow tcp from 192.168.10.1 to any
and still everything works fine. But when I try the next line
# ipfw add 300 fwd 127.0.0.1 tcp from any to any 80
I keep receiving access denied messages from squid.

I found several emails about this problem in Google but no
solution.


What can be done now?

Thanks for any ideas,

Uli.

*-----------------------------------*
*        Peter Ulrich Kruppa        *
*          -  Wuppertal -           *
*              Germany              *
*-----------------------------------*

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message