On Wed, 2004-08-18 at 03:21 +0200, Cedric Blancher wrote: > Le mar 17/08/2004 à 13:02, Igor Popover a acrid : > > As I know, REDIRECT target redirects to the same if ace, but on another port. > > Nope. > REDIRECT target redirects to lo interface, on the port you want. > > > I can run squid on PP if ace, because it is created dynamically and I don't > > want it to listen on all addresses. > > Just have it run on 127.0.0.1, port 3128, and configure it as a > transparent proxy (see Squid doc). > > > I have tried to use REDIRECT and DAT, but without any success. > > And finally try this : > > iptables -t nat -A PREROUTING -p tcp --dport 80 \ > -j REDIRECT --to-ports 3128 As long as you want ALL port 80 traffic hitting your squid. Otherwise much better to be specific to interface or even ip block(s). Not a good idea to be mixing squid for internal use with external accelerator usage IMHO. > > Should work. > > Ted
