transparent squid proxy on obsd2.8/9

transparent squid proxy on obsd2.8/9

Post by Dick Viss » Sun, 29 Apr 2001 00:09:33



Hi

I'm trying to get squid to work as a transparent proxy on a 2.8 box.
It is already doing NAT/firewalling, and squid works OK on port blah.
I've tried to redirect incoming port 80 from my LAN (ipnat.ruels):

rdr fxp1 0.0.0.0/0 port 80 -> 192.168.0.1 port 3128

and treid to 127.0.0.1 too but no go.

Then I tried to transproxy thing form the packages collection but no
use with that either. I can't seem to find any stories out there from
people who set it up.

Someone plz post/mail his setup (ipf.rules, ifnat.rules, squid.conf,
and others if neccessary).

Thanks!

--
* Visser
AMsterdam
THe Netherlands

 
 
 

1. Transparent proxy with Squid and Apache problem

Hi all,

I have a problem getting squid and apache to work together. Basically
I have Squid set up (and working) as a transparent proxy. But when I
start Apache, neither it nor squid works. If I stop squid I can run
Apache just fine.
I am using RH 7.1 (2.4.2-2) and I have 2 NICs in the server, one with
public ip and one with 192.168.10.x
I told Apache to use port 81 and I have told Squid the following:

httpd_accel_host virtual
httpd_accel_port 81
httpd_accel_with_proxy on

But it doesn't work.

when I don't run apache and instead tell squid this:
httpd_port 80

Then squid works fine as a transparent cache. the problem as I can
understand it is that in order for squid to work as transparent cache
then it must have the http accellerator on (and it *must* use the:
httpd_accel_host virtual option), but if I put the FQDN of the server
instead of the 'virtual' then it doesnt work. So how to overcome that?

I should mention I am using IPCHAINS, and it is set up as follows:

ipchains -A input -J REDIRECT 3128 -p tcp -s 0.0.0.0/0 -d 0.0.0.0/0 80

I also have MASQUERADING turned on for the 'forward' chain in order
for the internal LAN to access the public internet.
The policy is 'ACCEPT' for both input and output chains.

And as you can see squid runs on port 3128.

Any ideas, things to try etc. would be much appreciated. Thanks.

Tobias Skytte

2. Disk filled up and now I get a kernel panic when rebooting

3. LinuxPowered - Transparent proxy using Squid

4. PCI Buslogic Flashpoint II -- any luck?

5. Help with configuring squid (aka proxy server) in transparent caching mode

6. ATI Charger: Xconfigurator problems

7. Transparent proxy other than squid???

8. Finger Information.

9. Help with configuring squid (aka proxy server) in transparent caching mode

10. Squid as transparent caching proxy

11. Squid transparent proxy problem with FreeBSD 4.4

12. Squid transparent proxy/authentication

13. Separate Squid Server for Transparent Proxy