Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 2 Jan 2011 13:59:31 -0800
From:      jay@experts-exchange.com
To:        "Damien Fleuriot" <ml@my.gd>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: transparent proxy
Message-ID:  <0d256a6f108ee1e15225ef3db09c1763.squirrel@mail.experts-exchange.com>
In-Reply-To: <4D20DD02.2090605@my.gd>
References:  <8fb3caa1300a9fcc5c2f23a70ade23a8.squirrel@mail.experts-exchange.com> <4D208AE2.6000402@my.gd> <3020c1e8b0ecb5e9bacb1033ddea2b3e.squirrel@mail.experts-exchange.com> <4D20BAEB.10101@my.gd> <5275a39aa1849d38d509a42b627dd4b0.squirrel@mail.experts-exchange.com> <4D20DD02.2090605@my.gd>

next in thread | previous in thread | raw e-mail | index | archive | help
>From studying squid rules, I found the following pf rule set. Does this do
something similar to what I'm after? I tried something like this but it
didn't help.

int_if="gem0"
ext_if="kue0"

rdr on $int_if inet proto tcp from any to any port www -> 127.0.0.1 port 3128

pass in on $int_if inet proto tcp from any to 127.0.0.1 port 3128 keep state
pass out on $ext_if inet proto tcp from any to any port www keep state

http://www.benzedrine.cx/transquid.html

Thanks

> On 1/2/11 9:04 PM, jay@experts-exchange.com wrote:
>> Here I want :
>>
>> nn:nn:nn.nnnnnn IP 127.0.0.1.51791 > 192.168.103.2.80: Flags [S], ack
>> ...
>>
>> int_if="lo0"
>> ext_if="ed0"
>>
>> pass in on $int_if route-to ($int_if 127.0.0.1) from 192.168.103.1 keep
>> state
>>
>> But no good (it's not able to sync) :
>>
>
> How do things go when using synproxy in your pass rule ?
>
> Something like: pass in log on $int_if route-to ($int_if 127.0.0.1) from
> 192.168.103.1 synproxy state
>
>





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0d256a6f108ee1e15225ef3db09c1763.squirrel>