Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Feb 2005 21:24:36 +0100
From:      Frank Nobis <fn@radio-do.de>
To:        =?ISO-8859-1?Q?Diego_Camarena_Gonz=E1lez?= <kendo_2@yahoo.com>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: Configuring ipfw with squid as a transparent proxy
Message-ID:  <e5c81c360f7ba626188757898386793d@radio-do.de>
In-Reply-To: <20050211231127.54471.qmail@web52410.mail.yahoo.com>
References:  <20050211231127.54471.qmail@web52410.mail.yahoo.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Am 12. Feb 2005 um 00:11 schrieb Diego Camarena Gonz=E1lez:

> Does anyone knows how can i configure Squid as a Transparent proxy
> using IPFW assuming that i have already configured Squid with Samba
> authentication.
>
First you need a rule in IPFW like this one

add 1000 fwd 127.0.0.1,3128 tcp from INET:IMASK to any 80 via IIF

where INET:IMASK is my local network an IIF is my internal interface.

and you need some specials in the squid conf like this:

http_port 127.0.0.1:3128
forwarded_for off
httpd_accel_with_proxy off
httpd_accel_uses_host_header off
httpd_accel_single_host off
cache_effective_user nobody
cache_effective_group nobody
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on


Gru=DF
	Frank
- --=20
Frank Nobis, Thielenstr. 12, 44369 Dortmund

Q: Because it reverses the logical flow of conversation.
A: Why is putting a reply at the top of the message frowned upon?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFCDmYONTxD6oqBaVcRAgzMAJ481jvtAG9yheBd5HKN03h47GkSewCfV3KQ
FiALyBUFl5jVIcBA4h7bL6I=3D
=3D8ybB
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?e5c81c360f7ba626188757898386793d>