transparent squid & iptables

["Abylai Ospan" <aospan@xxxxxxxx>]

Hello, All.

 

We tried to make transparent squid on 127.0.0.1 and REDIRECT (or DNAT) in iptables but iptables redirect pakets to the received interface IP.

 

In the iptables:

iptables -t nat -A PREROUTING -p TCP --dport 80 -j REDIRECT 3128

 

For example:

packet from user (IP: 10.0.0.5) to www.ru:80 received on eth0 (IP: 10.0.0.1). Packet redirected to the 10.0.0.1:3128 but squid listen on 127.0.0.1:3128 so nothing work ;-(

 

How we can redirect packet to the 127.0.0.1 port 3128 in iptables ?!

 

wbr, Abylai

NetUP Systems

Moscow, Russia