Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 Jul 2008 19:37:29 +0000 (GMT)
From:      Jay Hall <jhall@vandaliamo.net>
To:        freebsd-questions@freebsd.org
Subject:   Bypassing Transparent Proxy
Message-ID:  <207569.19851217533049107.JavaMail.javamailuser@localhost>

next in thread | raw e-mail | index | archive | help
Ladies and Gentlemen,

A situation has arisen for which I need to bypass my transparent proxy 
server (Squid) for a ceratin IP address range.

Following are the contents of my ipnat.rules file.

map em1 192.d.e.f/24 -> 0/32
map em1 from 10.a.b.c/24 to 69.147.83.33/32 -> 0/32
rdr em0 0.0.0.0/0 port 80 -> 10.x.y.z port 3128 tcp
map em1 10.a.b.c/24 -> 0/32

em1 is the external interface on my server.

My thinking with the rules, was adding the map command before the rdr 
would prevent traffic destined for 69.147.83.33 from hitting the proxy 
server.  Unfortunately, it did not work.

Is there an easy way to bypass the proxy server when accessing this one 
address?

Thanks,



Jay




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?207569.19851217533049107.JavaMail.javamailuser>