Transparent proxy other than squid???

Transparent proxy other than squid???

Post by Ma » Fri, 14 Jul 2000 04:00:00



Hi all

Is there a simpler (and safe) alternative to squid to implement a
tranparent proxy? I have read that, although powerful, squid is fairly
difficult to configure and I am affraid I can compromise the system I'm
going to install it in if I do something wrong.

Tnx

 
 
 

Transparent proxy other than squid???

Post by Tim Hayn » Fri, 14 Jul 2000 04:00:00



> Is there a simpler (and safe) alternative to squid to implement a
> tranparent proxy? I have read that, although powerful, squid is fairly
> difficult to configure and I am affraid I can compromise the system I'm
> going to install it in if I do something wrong.

Squid is perfectly safe & wonderful - IME it's the best if you've got the
machinery to cope with it (a fair resource-load per hit, putting it that
way).
Alternatives are: junkbuster, wwwoffled, adzapper, ...

Around here at home I use wwwoffled. For easy configuration, it's pretty
good. OTOH it has one or two locking problems if you have several boxes
asking for the same URL at once. I've not looked into junkbuster, but from
what I've heard, its advocates are fairly fond of it :)

~Tim
--
| Geek Code: GCS dpu s-:+ a-- C++++ UBLUAVHSC++++ P+++ L++ E--- W+++(--) N++
| w--- O- M-- V-- PS PGP++ t--- X+(-) b D+ G e++(*) h++(*) r--- y-          
| The sun is melting over the hills,         | http://piglet.is.dreaming.org/


 
 
 

Transparent proxy other than squid???

Post by Rootma » Sat, 15 Jul 2000 04:00:00


Sounds like your in the same boat I was.  I found Oops!, it is
supposed to be faster, easier to setup and less resource
intensive.

I got mine setup in less than an hour.  You also need the
Transproxy module (which I *guess* you need with Squid too). It
reroutes all the port 80 requests to the given proxy port so as
to make the proxy invisible.

I was going to give you URLs to both but I can't seem to get
through to www.freshmeat.net at the moment, either their down or
my access is screwed up again.  Go there and search for both
Oops! and transproxy.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


>Hi all

>Is there a simpler (and safe) alternative to squid to implement
a
>tranparent proxy? I have read that, although powerful, squid is
fairly
>difficult to configure and I am affraid I can compromise the
system I'm
>going to install it in if I do something wrong.

>Tnx

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I am in no way associated with or endorse the following spam
from Keen.com
.

-----------------------------------------------------------

Got questions?  Get answers over the phone at Keen.com.
Up to 100 minutes free!
http://www.keen.com

 
 
 

1. FC3/Kernel 2.6, Fast Switching, Transparent Proxy, Squid, WCCP Help!!!!!

I am trying to implement a transparent proxying solution with FC3,
Squid, and Cisco Routers (via WCCP/GRE) and am having problems getting
the Cisco Router to talk with my squid box. Per Jeremy Garcia's
excellent article in Linux Magazine, I have checked that my updated
stock FC3 kernel (2.6.11-1.14_FC3smp) has packet filtering, connection
tracking, IP tables support, full network address translation (NAT) and
REDIRECT target support enabled in the kernel (loadable modules0. The
article also states that FAST Switching must be set to NO.

I have looked for Fast Switching in my .config, in make menuconfig, and
googling, but have not seen anything as far as configuring it in FC3 or
2.6 kernels. Does anyone have any ideas how I can set/check the Fast
Switching setting?

I know the box functions well as a normal proxy, however the
transparent part of this is what I am having a difficult time getting
to work -- more specifically the wccp connection.

viewing my iptunnel gives:
gre0: gre/ip remote any local any ttl inherit nopmtudisc
sit0: ipv6/ip remote any local any ttl 64 nopmtudisc
gre1: gre/ip remote 192.168.1.1 local 192.168.1.200 dev eth0 ttl
inherit

lsmod shows ip_gre, ipt_REDIRECT, iptables_nat, and other modules

I am using the a 2.6.11 kernel so I do nit believe I have to run the
ip_wccp patch.

netstat -i gives:

Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0 1500 0 679078 0 0 0 1326781 0 0 0 BMRU
gre1 1476 0 0 0 0 0 1 0 0 0 OPRU
lo 16436 0 7 0 0 0 7 0 0 0 LRU

which looks like only 1 TX-OK packet has been transmitted????

Help!

2. VTIME and VMIN

3. Help: Firewall and Squid w/ transparent proxy

4. suppress gif-log

5. transparent proxy using squid + iptables

6. Can't read dir - help plz

7. [Fwd: Re: transparent proxy and squid]

8. Solaris x86 , support to Jaz drives? how to mount? which /dev file?

9. LinuxPowered - Transparent proxy using Squid

10. LVS, squid and Transparent Proxy

11. Ipchains firewall and transparent/interception squid proxy question

12. Transparent Proxy - Squid & IPChains

13. debian Etch transparent squid proxy error messages