Re: [squid-users] tproxy vs DNAT

2009-05-30 Thread johan firdianto
for using TPROXY, you should set up triangle routing that sometimes make headache. if you don't want triangle routing, you could make your proxy act as bridge. It's true that we have invisible proxy, for better you could strip off the squid signature at the below error page by modifyng the source.

[squid-users] tproxy vs DNAT

2009-05-29 Thread Gavin McCullagh
Hi, there's been a lot of talk about TPROXY being added back into the linux kernel and squid changing to support it. Currently, we do transparent proxying by policy routing port 80 traffic to the proxy server then using DNAT (iptables) on the proxy server. Could someone point me to something

Re: [squid-users] tproxy vs DNAT

2009-05-29 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, there's been a lot of talk about TPROXY being added back into the linux kernel and squid changing to support it. Currently, we do transparent proxying by policy routing port 80 traffic to the proxy server then using DNAT (iptables) on the proxy server. Could