From owner-freebsd-pf@FreeBSD.ORG  Tue Nov  6 22:16:11 2007
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 9ECA316A418
	for <freebsd-pf@freebsd.org>; Tue,  6 Nov 2007 22:16:11 +0000 (UTC)
	(envelope-from Greg.Hennessy@nviz.net)
Received: from smtp1.bethere.co.uk (smtp1.betherenow.co.uk [87.194.0.68])
	by mx1.freebsd.org (Postfix) with ESMTP id 6754713C480
	for <freebsd-pf@freebsd.org>; Tue,  6 Nov 2007 22:16:10 +0000 (UTC)
	(envelope-from Greg.Hennessy@nviz.net)
Received: from thebeast (87-194-161-157.bethere.co.uk [87.194.161.157])
	by smtp1.bethere.co.uk (Postfix) with SMTP id 484EF98118;
	Tue,  6 Nov 2007 21:57:44 +0000 (GMT)
From: "Greg Hennessy" <Greg.Hennessy@nviz.net>
To: "'Umar'" <unix.co@gmail.com>,
	<freebsd-pf@freebsd.org>
References: <13613687.post@talk.nabble.com>
In-Reply-To: <13613687.post@talk.nabble.com>
Date: Tue, 6 Nov 2007 21:57:43 -0000
Message-ID: <004e01c820c0$0f642490$2e2c6db0$@Hennessy@nviz.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 12.0
thread-index: Acggr9tCtmbNDi9vQGS08OO2KQm9ewAD83kw
Content-Language: en-gb
x-cr-hashedpuzzle: BOzx EfKm Fqrj G3rl G5vj H0ZG IhNt LcQe P0df QwNm R74D SfPx
	TNfd TRt9 Uigx Uqn6; 2;
	ZgByAGUAZQBiAHMAZAAtAHAAZgBAAGYAcgBlAGUAYgBzAGQALgBvAHIAZwA7AHUAbgBpAHgALgBjAG8AQABnAG0AYQBpAGwALgBjAG8AbQA=;
	Sosha1_v1; 7; {CD928064-DF78-4C9B-B8B5-4E75DE2F9F26};
	ZwByAGUAZwAuAGgAZQBuAG4AZQBzAHMAeQBAAG4AdgBpAHoALgBuAGUAdAA=;
	Tue, 06 Nov 2007 21:57:38 GMT;
	UgBFADoAIABzAHEAdQBpAGQAIABhAG4AZAAgAGEAcABhAGMAaABlACAAcwBhAG0AZQAgAG0AYQBjAGgAaQBuAGUA
x-cr-puzzleid: {CD928064-DF78-4C9B-B8B5-4E75DE2F9F26}
X-Antivirus: avast! (VPS 071105-1, 05/11/2007), Outbound message
X-Antivirus-Status: Clean
Cc: 
Subject: RE: squid and apache same machine
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Nov 2007 22:16:11 -0000

> I have squid and apache in the same machine. My problem is that the
> users
> cannot see the web page at the same machine in which squid is
> installed. Any
> idea why?

Yes, you should only policy route traffic *not* destined for your webserver

Try something like this instead

# Transparent Squid Redirect
#
# rdr pass on $Int  $TCP from <InsideNets> to !<InsideNets> port www  ->
127.0.0.1 port 3128


Greg