Re: tranparent proxying, squid, nat, ipfw

2003-10-06 Thread chael
your port 80 hijack is waaay to far below. it should be like in the first three lines: 100 divert 8668 ip from any to any via ${oif} 200 allow tcp from ${oip} to any 300 fwd 127.0.0.1,3128 tcp from any to any dst-port 80 append the rest from here... ;-) - Original Message - From:

RE: tranparent proxying, squid, nat, ipfw

2003-10-06 Thread Gil Agno Virtucio
so far this was the simpliest squid configuration that i've seen... http://ezine.daemonnews.org/200209/squid.html hope this helps... - Gil Agno Virtucio Janitor/Collector/Messenger NEC System Integration and Construction Philippines Inc. 15th

RE: tranparent proxying, squid, nat, ipfw

2003-10-06 Thread Alexander Kühn
Hi, my advice is, take it step by step. Set up your nat, apache (if you need it), squid (don't use httpd_accel at the beginning!). Now I'm a bit unsure what you want to do, if you want to force the use of a proxy for your NAT-Users, so create your redirection rule which redirects outgoing traffic

Re: tranparent proxying, squid, nat, ipfw

2003-10-06 Thread chael
I have done a number of servers in this setup. It really is as simple as following this http://www.squid-cache.org/Doc/FAQ/FAQ-17.html#ss17.8 plus the divert line as the first line in ipfw and the necessary NAT in rc.conf. However, if you are thinking of implementing WCCP+transparent proxy+NAT,

Re: tranparent proxying, squid, nat, ipfw

2003-10-05 Thread Mark Pearce
On Sun, 5 Oct 2003 23:40:09 -0400 (EDT) synrat [EMAIL PROTECTED] wrote: I'm having a hard time getting this working together. I have squid 2.5 stable working and with all the required setting for transparent proxying. The machine has the kernel with IPFW and forwarding options. NAT is on,