Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Jul 2001 08:25:08 -0400
From:      Manolo Valdes <admin@atenas.cult.cu>
To:        freebsd-questions@freebsd.org
Subject:   transparent proxy problem
Message-ID:  <01070408472700.01695@proxy.atenas.cult.cu>

next in thread | raw e-mail | index | archive | help
Hi 
I'm trying to run squid as a transparent proxy but nothing works fine.

there is the squid.conf file:
_____________________________________________
#Squid Transparent proxy settings
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

#Defaults:

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535
acl Safe_ports port 280		# http-mgmt
acl Safe_ports port 488		# gss-http
acl Safe_ports port 591		# filemaker
acl Safe_ports port 777		# multiling http
acl CONNECT method CONNECT

# My acls
acl This_One src 169.158.120.179/255.255.255.255
acl LAN src 192.168.1.1/255.255.255.0
#Default configuration:

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports

http_access allow This_One
http_access allow LAN
http_access deny all
____________________________________________________

and there is the ipfw rules

00050 fwd 169.158.120.179,3128 tcp from 192.168.1.0/24 80 to any
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
65000 allow ip from any to any
65535 deny ip from any to any

My kernel have been compiled whith
________________________________________________
options		IPFIREWALL		
options		IPFIREWALL_VERBOSE	
options		IPFIREWALL_FORWARD	
options		IPDIVERT		
_________________________________________________

so i think everything  is ok, but nothing works.
i was wondering if the squid that cames  with FreeBSD-4.2 distributions is
compiled for transparent proxy?
if something is missing in my configuration please tell me.

greetings
Manolito

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01070408472700.01695>