Redirect Incoming port 80 connections to port 8080.

Jeff Hedley jeffh at tcnetworksinc.com
Thu Jul 26 22:23:12 UTC 2007


I am having a problem getting a Dansguardian + Squid transparent
proxying system going for a client.  The following is what i want to do,
but cannot figure out how to get it working using ipfw + natd:


[Host]  -  10.0.0.150/24 - sends request to router google.com:80
  |
  |
  |
  v
[Router]  -  10.0.0.1/24 - receives request for google.com:80 but sets
  |          proxy server as next hop for transparent proxy purposes.
  |        - Not transparently proxyed yet.
  |
  v
[FreeBSD Proxy] - 10.0.0.2/24 - receives request for google.com:80
  |             - request gets transparently proxied to 10.0.0.2:8080
  |               (this is the part I don't know how to do).
  |             - runs through Dans, then Squid.
  |             - Squid sends request out to router again.
  |             - Outing squid requests get NATed to 10.0.0.2 (also
  |               don't know how to do this).
  |
  v
[Router]  -  10.0.0.1/24 - receives the request for google.com again,
  |          but request is allowed through since it's coming from
  |          10.0.0.2.
  |
  v
(interweb)

Can you tell me how I would setup the FreeBSD box to do what i want
using ipfw and natd?

--
Jeff Hedley
TC Networks, Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 194 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20070726/909e5ef7/signature.pgp


More information about the freebsd-questions mailing list