more transparent proxy and squid questions.

Bill Moran wmoran at
Sun Jun 15 16:48:06 PDT 2003

Andrew Thomson wrote:
> On Fri, Jun 13, 2003 at 09:47:09AM -0400, Bill Moran wrote:
>>Yes.  You've got the right idea.
> hmm.. i have encountered some difficulties ;) so now i'm seeking some
> more advice..
> i have the following rules on my firewall:
> 10561 skipto 11000 ip from to any
> 10562 fwd,3128 tcp from to any 80
> keeping in line with my example, 1=fwall, 2=squid, 3=user
> the skipto is in there so we go through nat and get a proper ip.
> i never see any packets get to the squid box though..
> ipfw show indicates matching packets
> ipfw show 10561 10562
> 10561       5342        331306 skipto 11000 ip from to any
> 10562       2520        120960 fwd,3128 tcp from to any 80
> a tcpdump on the squid box looking out for port 3128 shows nothing, although
> the ipfw shows matches..
> i'll keep digging around but any more tips would be appreciated on this
> setup.

Someone else may have keener eyes, but for my part I can't guess what the problem
could be from your description.

Can you send your entire ipfw ruleset?  (i.e. the complete output of 'ipfw show')
Perhaps then I'll be able to get a better idea what you're doing.  If 10562 is
catching packets, then it's likely that it's somewhere else that the problem lie.

Bill Moran
Potential Technologies

More information about the freebsd-questions mailing list