ipfw + trasnparent proxy

[Bob Hall]

On Thu, Sep 18, 2003 at 09:41:58AM +1200, Marcos Biscaysaqu wrote:
> Hi Bob.
>    I have the proxy working and setting to trasnparent proxy, and I 
> have got my IPFW working. the problem is
> I have my proxy on port 3218 and I want redirect all the traffic on port 
> 80 to my proxy so the client don't need setup the proxy in them browser.
> Do you know how can I make work it with IPFW.
> thanks

OK. To recapitulate, you need
	options         IPFIREWALL         #firewall
	options         IPFIREWALL_FORWARD #enable transparent proxy support
in the kernel config file, and then you need to recompile. If IPFW works, 
then you obviously have the first. Make sure you've recompiled with the 
second also.

You need the following line in rc.firewall:
	${fwcmd} add fwd 127.0.0.1,3128 tcp from any to any 80 in via ${iif}
where iif is the internal interface that your proxy box uses to communicate 
with your LAN. For example, my firewall file contains
	iif="fxp0"

Further questions should go to freebsd-questions, rather than 
freebsd-stable. 

Bob Hall