Squid and TPROXY

[Alexander]

07.05.2013, 11:47, "Andrea Venturoli" <ml at netfence.it>:
> Hello.
>
> I might be interested in running Squid's TPROXY with ipfw.
>
> Looking for docs, I've found almost only this:
> http://tproxy.no-ip.org/
>
> It seems a bit old, is it still valid?
>
> Any caveat/hint?
> Can it work alongside standard mode?
>
>   bye & Thanks
>         av.
> _______________________________________________
> freebsd-ports at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at freebsd.org"
You must have kernel with:
options         IPFIREWALL_FORWARD
then in ipfw rules you should add something like:
${fwcmd} add fwd 127.0.0.1,3128 tcp from ${int_net} to any 80 out via ${ext_if}
and in squid.conf you should add something like:
http_port 192.168.1.1:3128
http_port 127.0.0.1:3128 transparent
thats all