Date: Wed, 12 Sep 2007 10:50:38 +0600 From: "Anwarul Mamun" <mamun@freebsdmovement.org> To: "Andrew Pantyukhin" <infofarmer@freebsd.org> Cc: freebsd-isp@freebsd.org Subject: Re: Squid proxy 2.6 with FreeBSD 6.2 Message-ID: <4857c35e0709112150y2cb082dcgb707f8fbdfbd934b@mail.gmail.com> In-Reply-To: <20070911183044.GC83726@amilo.cenkes.org> References: <4857c35e0709110423w77c5217fs81a1f014d0a48adf@mail.gmail.com> <20070911183044.GC83726@amilo.cenkes.org>
next in thread | previous in thread | raw e-mail | index | archive | help
I am using two different server. One is running under linux and using iptables from which i want to forward http traffic to the FreeBSD box where i am running Squid proxy and want to make it run as transparent proxy. The problem is that the FreeBSD box is not working as a transparent proxy in this scenario. It seems that the Squid proxy server at FreeBSD box doesn't see the packet forwarded to it through the linux server. Any suggestion? On 9/12/07, Andrew Pantyukhin <infofarmer@freebsd.org> wrote: > > On Tue, Sep 11, 2007 at 05:23:28PM +0600, Anwarul Mamun wrote: > > Hi All! > > > > I have a linux gateway server (using iptables on this) where my client > hit > > first. I want to direct the http traffic to the proxy server based on > > FreeBSD ( i mean transparent proxy). I am using FreeBSD 6.2 and Squid > proxy > > 2.6. I have directed the http traffic from my linux gateway server to > the > > proxy server on FreeBSD as below. But the transparent proxying does not > > work. Is there anyone worked with the issues on transparent proxy with > > FreeBSD 6.2. who may suggest in this case? > > > > > > /sbin/iptables -t nat -A PREROUTING -s 192.168.40.0/24 -p tcp --dport 80 > -j > > DNAT --to 172.16.3.1:8080 > > /sbin/iptables -t nat -A PREROUTING -s 192.168.40.0/24 -p tcp --dport > 8080 > > -j DNAT --to 172.16.3.1:8080 > > Assuming your squid config is right, you should stop modifying > packets (with little knowledge of iptables, I think -j DNAT --to > ... does that). If you manage to reroute unmodified packets to > the FreeBSD box, you'll need something like this to set up its > ipfw: > > $cmd add 100 fwd 127.0.0.1,3128\ > proto tcp src-ip $lan_local not src-ip me not dst-ip me\ > dst-port $http_ports > $cmd add 200 allow via lo0 > $cmd add 500 deny dst-ip me dst-port 3128 not src-ip $lan_local >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4857c35e0709112150y2cb082dcgb707f8fbdfbd934b>