Hi,

This is relatively easy if you set the gateway of the other machine to be
your squid box. Otherwise you have no way of hijacking the connections !!
Also this could be done via a access list on a router.

Kind Regards 

Doron Shmaryahu

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andrew Thomson
Sent: 16 June 2003 08:52 AM
To: [EMAIL PROTECTED]
Subject: Re: more transparent proxy and squid questions.

i'm still having issues here..

has anyone else got transparent proxy going with firewall and squid on
different boxes??

anyway, from the squid faq, does this apply to freebsd these days??

..."Compile and run a version of Squid which accepts connections for other
addresses. For some operating systems, you need to have configured and
built a version of Squid which can recognize the hijacked connections
and discern the destination addresses. For Linux this seems to work
automatically. For *BSD-based systems, you probably have to configure
squid with the --enable-ipf-transparent option. (Do a make clean if you
previously configured without that option, or the correct settings may
not be present.)"...

i'm trying to use ipfw for my fwd'ing from the firewall to the proxy
server.

thanks,

ajt.

On Mon, Jun 16, 2003 at 07:25:26AM +0300, Rapier wrote:
>       From what you've said you have natd enabled,instead of redirecting
with ipfw you shoud redirect with natd!man natd
> 
> 
> On Mon, 16 Jun 2003 09:41:05 +1000
> Andrew Thomson <[EMAIL PROTECTED]> wrote:
> 
> > On Fri, Jun 13, 2003 at 09:47:09AM -0400, Bill Moran wrote:
> > > 
> > > Yes.  You've got the right idea.
> > > 
> > 
> > hmm.. i have encountered some difficulties ;) so now i'm seeking some
> > more advice..
> > 
> > i have the following rules on my firewall:
> > 
> > 10561 skipto 11000 ip from 192.168.1.2 to any
> > 10562 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80
> > 
> > keeping in line with my example, 1=fwall, 2=squid, 3=user
> > 
> > the skipto is in there so we go through nat and get a proper ip.
> > 
> > i never see any packets get to the squid box though..
> > 
> > ipfw show indicates matching packets
> > ipfw show 10561 10562
> > 10561       5342        331306 skipto 11000 ip from 192.168.1.2 to any
> > 10562       2520        120960 fwd 192.168.1.2,3128 tcp from 192.168.1.3
to any 80
> > 
> > a tcpdump on the squid box looking out for port 3128 shows nothing,
although
> > the ipfw shows matches..
> > 
> > i'll keep digging around but any more tips would be appreciated on this
> > setup.
> > 
> > thanks,
> > 
> > andrew.
> > 
> > 
> > 
> > _______________________________________________
> > [EMAIL PROTECTED] mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
> _______________________________________________
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
> 

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"



_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to