Hi,  
I would like to implement a transparent proxy on  Sun-Fire-480R machine with 
Solaris 9 OS, I also use a CISCO Router which doing the redirection of 
webtraffic into Squid.

I have successfully  installed squid-2.6.STABLE9 with the following options 

./configure '--localstatedir=/var' '--enable-removal-policies=heap,lru' 
'--enable-arp-acl'  '--enable-ipf-transparent'

I use the ip-filter 3.4.32  for redirecting the webtraffic(port 80) to port 3123

vi /etc/opt/ipf/ipnat.conf

rdr ce0 0.0.0.0/0 port 80 -> 10.0.0.222 port 3123 tcp

and on router I set

route-map proxy-redirect permit 20
 match ip address PROXY-REDIRECT
 set ip next-hop 10.0.0.222

ip access-list extended PROXY-REDIRECT
 deny   tcp any any neq www
 deny   tcp host 10.0.0.222 any
 permit tcp any any

I  can successfully  telnet the PROXY from a client on port 80

[EMAIL PROTECTED]:/> telnet 10.0.0.222 80
Trying 10.0.0.222...
Connected to 10.0.0.222.
Escape character is '^]'.

But from web-browser I am not able to have access on webpages….and the nat 
table list the following:

[EMAIL PROTECTED]:/> ipnat -l
List of active MAP/Redirect filters:
rdr ce0 0.0.0.0/0 port 80 -> 10.0.0.222 port 3123 tcp

List of active sessions:
RDR 10.0.0.222      3123  <- -> 198.133.219.25 80    [10.0.0.15 4322]
RDR 10.0.0.222      3123  <- -> 10.0.0.222      80    [10.0.0.22 51707]   

I would appreciate if someone help me? 
Has someone configured a transparent proxy on Solaris?

Thanks in advance
Happy new Year     


 


_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

Reply via email to