Date: Sat, 26 Oct 2002 13:52:21 -0400 From: mjoyner2@hq.dyns.cx To: Derrick Joseph <deejay98@digitelone.com> Cc: questions@freebsd.org Subject: Re: transparent proxy support Message-ID: <1035654741.3dbad65513507@imp.hq.dyns.cx> In-Reply-To: <web-25280870@digitelone.com> References: <web-25280870@digitelone.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Ok, I just set it up here. updated my ports directory first. :) performed a *STOCK* install of squid 2.5 cd /usr/ports/www/squid make install added the following to my squid.conf --- httpd_accel_host virtual httpd_accel_with_proxy on httpd_accel_uses_host_header on acl our_networks src 192.168.0.0/16 http_access allow our_networks --- created the cache directory started squid added the following ipfw rule to the box (this box is also my firewall/nat btw) (i did it after my natd divert rule) 00060 10305 545706 allow tcp from me to any 80 00061 4766 6370609 allow tcp from any 80 to me 00062 5620 299803 fwd 127.0.0.1,3128 tcp from any to any 80 tested a web site, and xmms everything is working fine and stuff shows up in my access.log --- # tail access.log 1035654302.029 387 192.168.2.34 TCP_MISS/301 607 GET http://www.slashdot.org/ - DIRECT/64.28.67.150 text/html 1035654302.475 328 192.168.2.34 TCP_MISS/200 11150 GET http://slashdot.org/ - DIRECT/64.28.67.150 text/html 1035654302.898 231 192.168.2.34 TCP_MISS/200 341 GET http://images2.slashdot.org/Slashdot/pc.gif? - DIRECT/64.28.67.114 image/gif --- Quoting Derrick Joseph <deejay98@digitelone.com>: > > Oh yes, I was also able to do it before as stated in my > previous email. The problem right now in the current > release is that the ipfilter header files are missing. > > On Sat, 26 Oct 2002 00:01:57 -0400 > mjoyner2@hq.dyns.cx wrote: > >what I was saying, is that I didn't > >do any special build of squid at the time. > > > >unfortunately, this was before 4.7. > > > >Quoting Derrick Joseph <deejay98@digitelone.com>: > > > >> > >> So you're using 4.7 ??? > >> > >> On Fri, 25 Oct 2002 23:44:57 -0400 > >> mjoyner2@hq.dyns.cx wrote: > >> >When I was running a transparent proxy for a college I > >> >used to work for, I just installed the standard squid > >> >from the ports collection and just adjusted my kernel > >> >to do the tranparent forwarding via ipfw and it seem > >> >to work just fine. > >> > > >> >Quoting Derrick Joseph <deejay98@digitelone.com>: > >> > > >> >> > >> >> > >> >> Hello People !!! > >> >> > >> >> I just upgraded my system from FreeBSD 4.6.2 to > >>FreeBSD > >> >> 4.7-RELEASE and now I'm having problem configuring a > >> >> transparent proxy server support. With my FreeBSD > >>4.6.2 > >> >> before, I haven't encountered a single problem when I > >> >> compiled squid to support transparent proxy with > >> >> "--enable-ipf-transparent" option. Thus, after > >> >>installing > >> >> the box and enabling the IPFIREWALL option in the > >> >>kernel, > >> >> I started installing squid with the same options I > >>did > >> >> with my FreeBSD 4.6.2 box. At the installation > >>process > >> >>it > >> >> stops it tells me that "IPFILTER header files not > >>found" > >> >> so I went through squid's configure script and found > >>out > >> >> that it should be "--enable-pf-transparent" if I want > >>to > >> >> use IPFW as my platform. This time it tells me "PF > >> >>header > >> >> files not found" ... what seems to be the problem in > >> >>here > >> >> ? > >> >> > >> >> Please help I'm using this box for production > >>purposes. > >> >> > >> >> Thanks. > >> >> > >> >> Deejay > >> >> > >>____________________________________________________________________ > >> >> ** Get your free E-Mail account at WWW.DIGITELONE.COM > >>** > >> >> > >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org > >> >> with "unsubscribe freebsd-questions" in the body of > >>the > >> >>message > >> >> > >> > > >> > > >> > > >> > > >> >------------------------------------------------- > >> >This mail sent through IMP: http://horde.org/imp/ > >> > >> ____________________________________________________________________ > >> ** Get your free E-Mail account at WWW.DIGITELONE.COM ** > >> > > > > > > > > > >------------------------------------------------- > >This mail sent through IMP: http://horde.org/imp/ > > ____________________________________________________________________ > ** Get your free E-Mail account at WWW.DIGITELONE.COM ** > ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1035654741.3dbad65513507>