/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Yes, I checked the archives and, yes, I even found my own thread on this
topic from many months ago but I'm stuck anyway...

I've redone things on my server and it is time, once again, for me to attempt
to use transparent redirection on my firewall such that all outgoing web
requests are automatically process via squid.  I though I knew what I was
doing but it does not seem work.

Please peruse the following settings and tell what I've missed:

ipchains attempt #1:
===================

/sbin/ipchains -A input -i $INTIF -s $INTLAN -d $UNIVERSE 80 -p tcp -j REDIRECT 3128

ipchains attempt #2:
===================

/sbin/ipchains -A input -j ACCEPT -i $LOOPBACKIF -p tcp -d $LOOPBACKIP/32 www
/sbin/ipchains -A input -j ACCEPT -i $INTIF -p tcp -s $INTLAN -d $INTIP/32 www 
/sbin/ipchains -A input -j REDIRECT 3128 -i $INTIF -p tcp -s $INTLAN -d $INTLAN/0 www 
$LOGGING


Neither of these attempts worked.  Either or both of them should have been
the magical recipe, I think.


squid settings:
==============

http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on

Are these squid settings correct?

Thanks!

-- 
Jake Colman                     

Principia Partners LLC                  Phone: (201) 946-0300
Harborside Financial Center               Fax: (201) 946-0320
902 Plaza II                           Beeper: (800) 928-4640
Jersey City, NJ 07311                  E-mail: [EMAIL PROTECTED]
                                       E-mail: [EMAIL PROTECTED]
                                          web: http://www.ppllc.com

microsoft: "where do you want to go today?"
linux:     "where do you want to go tomorrow?"
BSD:       "are you guys coming, or what?"

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to