more transparent proxy and squid questions.

Andrew Thomson ajthomson at
Sun Jun 15 16:41:16 PDT 2003

On Fri, Jun 13, 2003 at 09:47:09AM -0400, Bill Moran wrote:
> Yes.  You've got the right idea.

hmm.. i have encountered some difficulties ;) so now i'm seeking some
more advice..

i have the following rules on my firewall:

10561 skipto 11000 ip from to any
10562 fwd,3128 tcp from to any 80

keeping in line with my example, 1=fwall, 2=squid, 3=user

the skipto is in there so we go through nat and get a proper ip.

i never see any packets get to the squid box though..

ipfw show indicates matching packets
ipfw show 10561 10562
10561       5342        331306 skipto 11000 ip from to any
10562       2520        120960 fwd,3128 tcp from to any 80

a tcpdump on the squid box looking out for port 3128 shows nothing, although
the ipfw shows matches..

i'll keep digging around but any more tips would be appreciated on this



More information about the freebsd-questions mailing list