Why don't you try to change the squid port from 80 to something like
3128,
set the port forwading/redirect
and see what happens.
//Glynn
###### Well my port for squid is 3128 and not 80, and is it possible to ask how to execute the command for the forwarding and redirect
You might need to enable the netfilter code by compiling the squid to
./configure --enable-linux-netfilter
> httpd_accel_host virtual
> httpd_accel_port 80
> httpd_accel_with_proxy on
> httpd_accel_uses_host_header on
This should work.
> iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j
REDIRECT --to-port 3128
Only this single command is needed to make transparent proxy work.
##### If i would execute the "./configure --enable-linux-netfilter", do es this mean i have to remove my rpm based squid and install the tar packaged, and honestly, its really hard for me to do this on REDHAT linux.
You might also check your kernel if the proper options are set.
Under General Setup
-- Networking support
--Sysctl support
Under Networking Options
--Network packet filtering
--TCP/IP networking
Under Networking Options -> IP: Netfilter Configuration
--Connection tracking
--IP tables support
--Full NAT
--REDIRECT target support
--Under File Systems
--/proc filesystem support
..Disable the Fast Switching under Networking Options
Compile the kernel and be sure to enable the IP forwarding.
HTH
//Glynn
###### ????????, I really dont know how to look for this, since i only configure and administer my server through ssh remotely, cause i only have a headless server.
What errors are you encountering? can yo u also send your other
iptables
entries?
'jopoy
####### In fact i dont have any error, its just that my workstation doesnt work with transparent proxy. and i dont have any other iptables rules
do you have another iptables line that allow 80? If not, you should
have one
aside from the prerouting
Alben Benavente Alteza
Information Systems Security Administration
Information Systems Dept./ Philippine Airlines
##### I dont have any other iptables rules, likewise, im not sure how to allow port 80
jeremy
--
_______________________________________________
Check out the latest SMS services @ www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
-- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
