From owner-freebsd-ipfw Mon Mar 4 23:12:19 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from rwcrmhc52.attbi.com (rwcrmhc52.attbi.com [216.148.227.88]) by hub.freebsd.org (Postfix) with ESMTP id C925337B41A for ; Mon, 4 Mar 2002 23:11:58 -0800 (PST) Received: from blossom.cjclark.org ([12.234.91.48]) by rwcrmhc52.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020305071158.NKVY1147.rwcrmhc52.attbi.com@blossom.cjclark.org>; Tue, 5 Mar 2002 07:11:58 +0000 Received: (from cjc@localhost) by blossom.cjclark.org (8.11.6/8.11.6) id g257BvM89948; Mon, 4 Mar 2002 23:11:57 -0800 (PST) (envelope-from cjc) Date: Mon, 4 Mar 2002 23:11:57 -0800 From: "Crist J. Clark" To: Jeff Koftinoff Cc: freebsd-ipfw@FreeBSD.ORG Subject: Re: Transparent proxy for connections originating on localhost Message-ID: <20020304231157.T87533@blossom.cjclark.org> Reply-To: cjclark@alum.mit.edu References: <20020304221203.Q87533@blossom.cjclark.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from jeffkoftinoff@mac.com on Mon, Mar 04, 2002 at 10:18:18PM -0800 X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Mar 04, 2002 at 10:18:18PM -0800, Jeff Koftinoff wrote: > > On Monday, March 4, 2002, at 10:12 PM, Crist J. Clark wrote: > > > On Mon, Mar 04, 2002 at 09:50:37PM -0800, Jeff Koftinoff wrote: > >> > >> > >> Thank you very much for your reply. So is 'fwd'' the right way to go > >> for transparent proxying with the web browser and the proxy on the same > >> machine? > > > > I'm not sure why one would want to proxy connections to a webserver on > > the same machine. > > > > Content filtering for all http connections regardless of which browser > is installed. > > >> With the same rule that I previously specified, when I try to > >> access a remote web site, the 'fwd' rule blocks my connection and does > >> not forward to 127.0.0.1:9999. The browser (links) just hangs on > >> 'Making > >> connection'. and 'ipfw show' shows the counter increase. > > > > Hmmm... I thought you said it was working. I'm not clear on what is > > and is not working. > > When I originate the connection on an external computer, the fwd works. > When I originate the connection on the same computer that has the fwd > rule, the fwd rule causes the connect to hang. Hmmm... Wouldn't happen to have a, pass ip from any to any via lo0 At the top of your rules? -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message