more transparent proxy and squid questions.
Rapier
bsdwave at go.ro
Sun Jun 15 21:25:15 PDT 2003
From what you've said you have natd enabled,instead of redirecting with ipfw you shoud redirect with natd!man natd
On Mon, 16 Jun 2003 09:41:05 +1000
Andrew Thomson <ajthomson at optushome.com.au> wrote:
> On Fri, Jun 13, 2003 at 09:47:09AM -0400, Bill Moran wrote:
> >
> > Yes. You've got the right idea.
> >
>
> hmm.. i have encountered some difficulties ;) so now i'm seeking some
> more advice..
>
> i have the following rules on my firewall:
>
> 10561 skipto 11000 ip from 192.168.1.2 to any
> 10562 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80
>
> keeping in line with my example, 1=fwall, 2=squid, 3=user
>
> the skipto is in there so we go through nat and get a proper ip.
>
> i never see any packets get to the squid box though..
>
> ipfw show indicates matching packets
> ipfw show 10561 10562
> 10561 5342 331306 skipto 11000 ip from 192.168.1.2 to any
> 10562 2520 120960 fwd 192.168.1.2,3128 tcp from 192.168.1.3 to any 80
>
> a tcpdump on the squid box looking out for port 3128 shows nothing, although
> the ipfw shows matches..
>
> i'll keep digging around but any more tips would be appreciated on this
> setup.
>
> thanks,
>
> andrew.
>
>
>
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
More information about the freebsd-questions
mailing list