Chris Robertson wrote:

> Here's another possibility...  Change your iptables rule to
> 
> iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to
> 127.0.0.1:3128
> 
> and have squid only listen on the loopback interface ("http_port
> 127.0.0.1:3128" in squid.conf).  Would that work?  I haven't done much
> with nat in quite a while, so I'm not sure if you can NAT to lo.
> 
> Chris

That looks wild! I've got this machine running fine just now, with Netfilter
routing between eth0 and eth1 and Squid running without problems. And I'm
too big a coward to try your idea...

Thanks though!

//Niels

Reply via email to