Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 05 Oct 2001 16:24:05 +0200
From:      Hroi Sigurdsson <hroi@netgroup.dk>
To:        freebsd-net@freebsd.org
Subject:   Re: bridge + transparent proxy with 4-stable
Message-ID:  <3BBDC285.6E63AA3D@netgroup.dk>
References:  <86u1xe4a27.fsf@gradius.wdb.co.kr>

next in thread | previous in thread | raw e-mail | index | archive | help
CHOI Junho wrote:

> After running squid, I've added this rule at top of rules(output of
> ipfw -a list). 208.2.3.200(not real IP) is our firewall.
> 
> 00500       0          0 allow tcp from 208.2.3.200 to any via fxp0
> 00550     173      11165 fwd 127.0.0.1,3128 tcp from 208.2.3.128/25 to any 80 via fxp1
> 
> As shown, rule 550 _filters_ packets, but it seems not to forward
> packets to 3128 ports(squid). All clients can go out with its IP, and
> nothing remains in squid log.

Bridging and transparent proxying are incompatible.

-- 
Hroi Sigurdsson                             hroi@netgroup.dk
Netgroup A/S                          http://www.netgroup.dk

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BBDC285.6E63AA3D>