Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Jun 2002 12:26:34 +0200
From:      Nils Vogels <nivo+mailman-users@yuckfou.org>
To:        freebsd-isp@freebsd.org
Subject:   Re: squid proxy on a natd machine ??
Message-ID:  <20020617122634.G82652@amor.yuckfou.org>
In-Reply-To: <20020617095844.9940.qmail@web20105.mail.yahoo.com>; from freefabri@yahoo.it on Mon, Jun 17, 2002 at 11:58:44AM %2B0200
References:  <20020617095844.9940.qmail@web20105.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Jun 17, 2002 at 11:58:44AM +0200, Fabrizio Ravazzini wrote:
> Hello all is it a problem to install squid proxy on a
> nat machine?
> We've installed a FreeBSD 4.5 machine used to connect
> a Lan to internet, we use natd daemon which "puts" all
> the internal traffic to the external interface.
> We also need a proxy for http requests, so we decided
> to install squid on the same machine,is it a good
> idea? or because of the natd the proxy isn't able to
> take care of the requests on port 80?
> Is it better to have the proxy on another machine
> between the Lan and the nat?

Squid will do just fine.

You can achieve what you want to do in two ways:

1) Make the proxy available via a port redirect in the natd software
2) Enable transparent proxying (that way nobody escapes ;)

For option 1; there are leads in the natd docs
For option 2; You will have to enable transparent caching in squid while
compiling and youll have to enable transparent caching in natd as well. All is
documented.

Gr,

-- 
Nils Vogels		PGP:0xC26BD15F Available on keyservers.
S@H:4723WU/6.426yr	--> setiathome.ssl.berkeley.edu. Will you find aliens?

My other computer is your windows box.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020617122634.G82652>