Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 28 Feb 2015 07:41:17 -0500
From:      Monah Baki <monahbaki@gmail.com>
To:        Odhiambo Washington <odhiambo@gmail.com>
Cc:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: FreeBSD RDR question
Message-ID:  <CALP3=x9EDisRA2_nBOTo8NACHcxkT9SAs1fM92jGj0gDEAYbvQ@mail.gmail.com>
In-Reply-To: <CAAdA2WN_3trTdjT=1z2%2B%2BMeq3LsOfGpPUC%2B248fR=kiUwhnN-w@mail.gmail.com>
References:  <CALP3=x9vaahFQgjCbmzbrJxrBB8PdJ14UpgQwKBwTNWtNAkEWw@mail.gmail.com> <CAAdA2WN_3trTdjT=1z2%2B%2BMeq3LsOfGpPUC%2B248fR=kiUwhnN-w@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
The user cannot access the internet. If he enters however the IP and port
number in his browser he can access the internet.

I have the server running in intercept mode, in my squid.con

http_port 3128 intercept

http_port 80



The log files display00:00:19.008499 rule 0..16777216/0(match): pass in on
bge0: 10.0.0.111.5678 > 255.255.255.255.5678: UDP, length 93

00:00:00.764414 rule 0..16777216/0(match): pass in on bge0: 10.0.0.50.5678
> 255.255.255.255.5678: UDP, length 91

00:00:00.120755 rule 0..16777216/0(match): pass in on bge0: 10.0.0.56.5678
> 255.255.255.255.5678: UDP, length 91

00:00:00.070800 rule 0..16777216/0(match): pass in on bge0: 10.0.0.53.5678
> 255.255.255.255.5678: UDP, length 91

00:00:00.150908 rule 0..16777216/0(match): pass in on bge0: 10.0.0.55.5678
> 255.255.255.255.5678: UDP, length 91

00:00:09.898853 rule 0..16777216/0(match): pass in on bge0: 10.0.0.14.63515
> 10.0.0.24.22: Flags [S], seq 2684525113, win 8192, options [mss
1460,nop,wscale 2,nop,nop,sackOK], length 0

00:00:00.186720 rule 0..16777216/0(match): pass in on bge0: 10.0.0.54.5678
> 255.255.255.255.5678: UDP, length 91




Thanks



On Sat, Feb 28, 2015 at 7:10 AM, Odhiambo Washington <odhiambo@gmail.com>
wrote:

> By 'it's not working', what do you mean?
>
> What do you see in squid's access log? That would make more sense.
>
> Does  10.0.0.24 know how to get to the Internet?
>
> I need to read about WCCP2 because never used it before. It did look
> simple enough though from the HOWTOs I read.
>
>
>
>
> On 28 February 2015 at 15:03, Monah Baki <monahbaki@gmail.com> wrote:
>
>> Hi all,
>>
>> I have a freebsd 10.1 running squid, it has a single interface (bge0). My
>> Cisco is doing policy based routing and forwarding all http request to my
>> Freebsd server.
>>
>> In my pf.conf I have the following rule:
>>
>> rdr on bge0 inet proto tcp from any to any port 80 -> 10.0.0.24 port 3128
>>
>>
>> Do I need to add anything else? Reason I ask, it's not working.
>>
>>
>> Thanks
>> Monah
>> _______________________________________________
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscribe@freebsd.org"
>>
>
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254733744121/+254722743223
> "I can't hear you -- I'm using the scrambler."
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CALP3=x9EDisRA2_nBOTo8NACHcxkT9SAs1fM92jGj0gDEAYbvQ>