From owner-freebsd-net Tue Feb 25 16:42:15 2003 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 722C137B401 for ; Tue, 25 Feb 2003 16:42:13 -0800 (PST) Received: from mail2.dbitech.ca (radius.wavefire.com [64.141.13.252]) by mx1.FreeBSD.org (Postfix) with SMTP id A4FAD43FDD for ; Tue, 25 Feb 2003 16:42:12 -0800 (PST) (envelope-from darcy@wavefire.com) Received: (qmail 16890 invoked from network); 26 Feb 2003 01:01:38 -0000 Received: from dbitech.wavefire.com (HELO dbitech) (darcy@64.141.15.253) by radius.wavefire.com with SMTP; 26 Feb 2003 01:01:38 -0000 Content-Type: text/plain; charset="iso-8859-1" From: Darcy Buskermolen Organization: Wavefire Technologies Corp. To: freebsd-net@freebsd.org Subject: Transparent Proxy Date: Tue, 25 Feb 2003 16:42:09 -0800 User-Agent: KMail/1.4.3 MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Message-Id: <200302201559.16002.darcy@wavefire.com> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org (Promoted to -net due to lack of responces on -questions) I'm trying to deploy a transparent proxy server for a friend's office but= have=20 run into a couple of snags that I can't seam to find the correct answer f= or. Please see http://home2.dbitech.bc.ca:8080/netconfig.txt for graphical=20 topology Note that I'm running IPFW2 on both BSD boxes. ipfw list output on 192.168.0.254: 00001 skipto 50000 tcp from any 1023-65535 to me dst-port 22 00040 skipto 50 tcp from 192.168.0.1 to any dst-port 80 00048 fwd 192.168.0.1 tcp from 192.168.0.0/24 to any dst-port 80 out 00999 divert 8669 ip from any to any via ed0 65533 allow ip from any to any 65535 deny ip from any to any ipfw list output on 192.168.0.1: 00500 fwd 127.0.0.1,3128 ip from 192.168.0.0/16 to any dst-port 80 in 65000 allow ip from any to any 65535 deny ip from any to any When the windows box (192.168.0.32) makes a web request it gets forwarded= to=20 the squid machine fine, and squid returns a "access denied" error message= ,=20 checking the cache.log on squid I see the reason is as follows: 2003/02/20 04:19:47| WARNING: Forwarding loop detected for: GET / HTTP/1.0 All the information I can find online regaring setting up transparent pro= xying=20 for squid using ipfw shows squid running on the gateway host, or on a=20 diffrent network segment. Can anybody point me in the correct direction = to=20 tell me what it is that I'm missing? --=20 Darcy Buskermolen Wavefire Technologies Corp. ph: 250.717.0200 fx: 250.763.1759 http://www.wavefire.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message