----- Original Message -----
From: "Winelfred G. Pasamba" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, September 22, 2003 8:32 AM
Subject: Re: [plug] transparent Squid and httpd on port 80


> run apache at a different port and set http_accel_host and http_accel_port
> to point to it.
>
> hope it helps :)
> win

no need to do that :-> and besides tcp port 80 is the standard port number
for http protocol...

tiger, put a rule before your forwarding rule (iptables' REDIRECT) that says
if the destination ip address is the ip address where your apache binds,
deliver it immediately so that the next rule to it (which is your REDIRECT
rule) will not going to interpret.. for example:

iptables -A INPUT -i eth0 -p tcp -d 127.0.0.1 --dport 80 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -d <ip.address.of.your.http.server> --dport
80 -j ACCEPT
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j
REDIRECT --to-port 3128


> Bopolissimus Platypus said:
> > hello all,
> >
> > i'd like to know if it's possible to do transparent squid and still run
> > an httpd daemon on port 80 on the same box (there is only one
> > ethernet interface).
> >
> > what we do is, all requests to port 80 get forwarded to our
> > proxy by the CISCO router.  there is no port mangling at
> > the CISCO end, so they are forwarded to port 80 on the
> > proxy server.
> >
> > on the proxy server, there are the standard transparent
> > proxy rules (iptables and squid.conf) so that http requests
> > that arrive on port 80 get forwarded to port 3128 and squid
> > then handles them.
> >
> > my question is, is it possible to have squid distinguish
> > requests to itself (rather than to remote hosts), and then
> > have requests to itself be processed by apache?
> > requests to remote hosts, of course, get sent to
> > the proxy for processing.
> >
> > tiger




--
Philippine Linux Users' Group (PLUG) Mailing List
[EMAIL PROTECTED] (#PLUG @ irc.free.net.ph)
Official Website: http://plug.linux.org.ph
Searchable Archives: http://marc.free.net.ph
.
To leave, go to http://lists.q-linux.com/mailman/listinfo/plug
.
Are you a Linux newbie? To join the newbie list, go to
http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie

Reply via email to