Configuring ipfw with squid as a transparent proxy

Frank Nobis fn at radio-do.de
Sat Feb 12 12:24:56 PST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Am 12. Feb 2005 um 00:11 schrieb Diego Camarena González:

> Does anyone knows how can i configure Squid as a Transparent proxy
> using IPFW assuming that i have already configured Squid with Samba
> authentication.
>
First you need a rule in IPFW like this one

add 1000 fwd 127.0.0.1,3128 tcp from INET:IMASK to any 80 via IIF

where INET:IMASK is my local network an IIF is my internal interface.

and you need some specials in the squid conf like this:

http_port 127.0.0.1:3128
forwarded_for off
httpd_accel_with_proxy off
httpd_accel_uses_host_header off
httpd_accel_single_host off
cache_effective_user nobody
cache_effective_group nobody
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on


Gruß
	Frank
- -- 
Frank Nobis, Thielenstr. 12, 44369 Dortmund

Q: Because it reverses the logical flow of conversation.
A: Why is putting a reply at the top of the message frowned upon?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFCDmYONTxD6oqBaVcRAgzMAJ481jvtAG9yheBd5HKN03h47GkSewCfV3KQ
FiALyBUFl5jVIcBA4h7bL6I=
=8ybB
-----END PGP SIGNATURE-----



More information about the freebsd-ipfw mailing list