Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Jun 2016 10:03:30 +0200
From:      Miroslav Lachman <000.fbsd@quip.cz>
To:        atar <atar.yosef@gmail.com>, Gary Palmer <gpalmer@freebsd.org>
Cc:        "freebsd-pf@freebsd.org" <freebsd-pf@freebsd.org>
Subject:   Re: Filter connections based on the hostname.
Message-ID:  <57625D52.1030607@quip.cz>
In-Reply-To: <545E509D-7851-4D1E-9547-2B20D36DD04E@gmail.com>
References:  <5858A82C-FB66-4D67-A676-47EABED976CE@gmail.com> <57600481.6080204@quip.cz> <08195C33-DC97-4ADD-9C0A-D9493E2C29F7@gmail.com> <57602DEC.6080201@quip.cz> <969F8F1C-E992-4F47-89F9-759FD8CE2B91@gmail.com> <20160614202243.GA81528@in-addr.com> <545E509D-7851-4D1E-9547-2B20D36DD04E@gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
atar wrote on 06/16/2016 09:15:

[...]

>> www.google.com DNS TTLs are 5 minutes so you shouldn't have to worry
>> about the IP changing in less then a minute UNLESS your PF firewall
>> and your browser use different DNS servers and could therefore get
>> different answers
>>
>> Regards,
>>
>> Gary
>
> Can you give me any hint how to cause PF to redirect all the traffic through the squid proxy? I'm pretty new in them both (PF and squid).

You can find basic config here
http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsdPf

Squid can be installed from ports / packages
http://www.freshports.org/www/squid/

Miroslav Lachman



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?57625D52.1030607>