From owner-freebsd-questions Wed Jun 26 10:42: 5 2002 Delivered-To: freebsd-questions@freebsd.org Received: from malkav.snowmoon.com (malkav.snowmoon.com [209.23.60.62]) by hub.freebsd.org (Postfix) with SMTP id BB18437B416 for ; Wed, 26 Jun 2002 10:41:23 -0700 (PDT) Received: (qmail 1967 invoked from network); 26 Jun 2002 17:41:11 -0000 Received: from localhost.snowmoon.com (HELO localhost) (127.0.0.1) by localhost.snowmoon.com with SMTP; 26 Jun 2002 17:41:11 -0000 Date: Wed, 26 Jun 2002 13:41:11 -0400 (EDT) From: Jaime To: freebsd-questions@freebsd.org Subject: Bridge and proxy? Message-ID: <20020626133540.F1925-100000@malkav.snowmoon.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I'm trying to set up a FreeBSD 4.6 system for bridging and as a transparent HTTP proxy. I have the squid (tcp port 3128) and dansguardian (tcp port 8080) ports installed and running well. I have bridging in the kernel and it is running well. The topology is: (ISP) -- (Router) -- (FBSD 4.6) -- (LAN's core switch) I have it working well enough that HTTP requests to port 80 are passing through the FreeBSD box and working correctly. However, they are not going into DansGuardian (which passes the request to Squid). I'm using the following IPFW rules: cerberus# ipfw list 00100 allow ip from any to any via lo0 00200 deny ip from any to 127.0.0.0/8 00300 deny ip from 127.0.0.0/8 to any 01000 allow tcp from me to any 01100 allow tcp from any to me 80 01200 fwd 127.0.0.1,8080 tcp from any to any 80 01210 fwd 127.0.0.1,8080 tcp from any to any 8080 01220 fwd 127.0.0.1,8080 tcp from any to any 81 01230 fwd 127.0.0.1,8080 tcp from any to any 8000 65000 allow ip from any to any 65535 allow ip from any to any Any advice? Thanks in advance, Jaime To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message