Re: Squid on LAN

2011-05-10 Thread Alessandro Baggi
I've tried the rdrnat without results and I can't put in other vlan, I'm trying this at home. Other issue? Thanks in advance On 09/05/2011 19:06, Stuart Henderson wrote: If possible, put the proxy server on a different vlan. If you can't, try the method in

Squid on LAN

2011-05-09 Thread Alessandro Baggi
Hi list. I've a question about positioning a proxy server into the LAN. I've tried this in dmz (also in transparent mode + rdr pf), and works great, but now I'm trying to put this proxy in LAN. Also in this case it works, but when I try to set it in transparent mode, and put rdr rules on the

Re: Squid on LAN

2011-05-09 Thread Stuart Henderson
If possible, put the proxy server on a different vlan. If you can't, try the method in http://www.openbsd.org/faq/pf/rdr.html#rdrnat It works, but your proxy logs will then only show the firewall's address rather than the original client addresses. On 2011-05-09, Alessandro Baggi

Re: Squid on LAN

2011-05-09 Thread Stuart Henderson
On 2011/05/09 16:31, R0me0 *** wrote: You can too try this: pass in on $int proto tcp from $int:network to port www route-to ( $dmz $ip_of_squid ) pass out on $dmz proto tcp to $ip_of_squid to port www This won't work for machines on the same subnet as the proxy. In that case the return

Re: Squid on LAN

2011-05-09 Thread R0me0 ***
You can too try this: pass in on $int proto tcp from $int:network to port www route-to ( $dmz $ip_of_squid ) pass out on $dmz proto tcp to $ip_of_squid to port www Cheers 2011/5/9 Stuart Henderson s...@spacehopper.org If possible, put the proxy server on a different vlan. If you can't,

Re: Squid on LAN

2011-05-09 Thread R0me0 ***
Yes, You have the reason, I put DMZ because of this :) 2011/5/9 Stuart Henderson s...@spacehopper.org On 2011/05/09 16:31, R0me0 *** wrote: You can too try this: pass in on $int proto tcp from $int:network to port www route-to ( $dmz $ip_of_squid ) pass out on $dmz proto tcp to