I'm not certain just how you've set this up, but it sounds a little funny.  Here's a 
couple hints off the cuff.  Does eth0 have an IP address?  It shouldn't, since it's 
part of the bridge interface.  Does br0 have and IP address?  It should, if you want 
to redirect traffic to it.  To do transparent proxying, you need an address to which 
squid can bind.  Maybe a little asci art?  Everyone loves art...

 
Jeremy
Jeremy Jones
Department of Juvenile Corrections
IT Systems Integration Analyst, Senior
(208) 465-8443
mailto:[EMAIL PROTECTED]

>>> "Network Administrator" <[EMAIL PROTECTED]> 01/16/03 09:52 AM >>>
I couldn't find a clear answer to this one in the list....

I am attempting to create a transparent squid proxy.  I have the bridge all
setup, iptables works fine.
The problem I have run into is that when I try to redirect port 80 to port
3128 nothing ever comes back to me.

Here is my setup:

eth0--------eth1 ( this is the bridge "br0" )
eth2 (public ip address for squid to use)

I am connected to eth0, eth1 & eth2 go to the LAN.

I tried the following iptables rules, which I got from "Transparent Proxy
with Linux and Squid mini-HOWTO"

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j
REDIRECT --to-port 3128
iptables -A INPUT -i eth0 -p tcp --dport 3128 -m state --state
NEW,ESTABLISHED -j ACCEPT

Any Ideas?

Thanks,
Brett Carroll
Network Administrator
WireFire Internet Service
[EMAIL PROTECTED]

_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge


_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to