Jimmy Lim wrote:
> Joel Eusebio wrote:
>
> > I use ipchains to pipe all my clients http request to a proxy server
> > (running squid)
> > I placed something like this on my init scripts:
> >
> > ipchains -A input -p TCP -d 127.0.0.1 80 -j ACCEPT
> > ipchains -A input -p TCP -d 192.168.0.0/27 -j ACCEPT
> > ipchains -A input -p TCP -d 0/0 80 -j REDIRECT xxxx
> >
> > xxxx is the port squid uses e.g. 3128, 8080, 8888
> >
> > note:ipchains should run on the box where squid is running
> >
> > I hope this helps :)
> >
> > On Fri, 8 Dec 2000, Carlo Valdes wrote:
> >
> > > Hello.
> > >
> > > My RH 6.2 machine running IP Masq and Squid Proxy was running fine. But
> > > recently I want to enable Transparent proxy. How do I do that? I have
> > > read the how-to but wasn't successful. Please advise.
> > >
> > > Regards,
> > > Carlo
> > >
> > >
> > > _
> > > Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> > > To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
> > >
> >
> > --
> > _ _ _ _____________________
> > |_|_|_|
> > |_| Joel N. Eusebio
> > |_| Systems Administrator
> > Cyberspace Inc. Manila
> > [EMAIL PROTECTED] _
> > +63 6372775 _ _|_|
> > _____________________|_|_|_|
> >
> >
> > _
> > Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> > To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
> And don't forget to put on the client machine the default gateway <default route>
> which is your transparent proxy.
>
> _
> Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
ERRATA:
Sorry for what I said a while ago, that was applicable only in BSD box. :(
Source: <http://www.squid-cache.org/Doc/FAQ/FAQ-17.html
1.Compile and run a version of Squid which accepts connections for other addresses.
For some operating systems, you need
to have configured and built a version of Squid which can recognize the hijacked
connections and discern the destination
addresses. For Linux this seems to work automatically. For *BSD-based systems, you
probably have to configure squid with the
--enable-ipf-transparent option. (Do a make clean if you previously configured
without that option, or the correct settings
may not be present.)
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
