Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Feb 2003 15:59:15 -0800
From:      Darcy Buskermolen <darcy@wavefire.com>
To:        freebsd-questions@freebsd.org
Subject:   Transparent Proxy
Message-ID:  <200302201559.16002.darcy@wavefire.com>

next in thread | raw e-mail | index | archive | help
I'm trying to deploy a transparent proxy server for a friend's office but=
 have=20
run into a couple of snags that I can't seam to find the correct answer f=
or.
Please see http://home2.dbitech.bc.ca:8080/netconfig.txt for graphical=20
topology

Note that I'm running IPFW2 on both BSD boxes.

ipfw list output on 192.168.0.254:

00001 skipto 50000 tcp from any 1023-65535 to me dst-port 22
00040 skipto 50 tcp from 192.168.0.1 to any dst-port 80
00048 fwd 192.168.0.1 tcp from 192.168.0.0/24 to any dst-port 80 out
00999 divert 8669 ip from any to any via ed0
65533 allow ip from any to any
65535 deny ip from any to any

ipfw list output on 192.168.0.1:

00500 fwd 127.0.0.1,3128 ip from 192.168.0.0/16 to any dst-port 80 in
65000 allow ip from any to any
65535 deny ip from any to any

When the windows box (192.168.0.32) makes a web request it gets forwarded=
 to=20
the squid machine fine, and squid returns a "access denied" error message=
,=20
checking the cache.log on squid I see the reason is as follows:

2003/02/20 04:19:47| WARNING: Forwarding loop detected for:
GET / HTTP/1.0

Can anybody point me in the correct direction to tell me what it is that =
I'm=20
missing?

P.S.
   Please CC me on responses as that I'm not subscribed to questions.



--=20
Darcy Buskermolen
Wavefire Technologies Corp.
ph: 250.717.0200
fx:  250.763.1759
http://www.wavefire.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200302201559.16002.darcy>