Has this machine got two interfaces?
Hi,
i want to use Squid 2.5Stable8 on my Debian Sarge System as a transparent Proxy. We've got i Firewall here (debian machine with iptables).
The idea is, that the users from the local net (172.21.0.0/16) use the transparent proxy.
Squid is running normal on the Proxy Machine and i've set the following options in squid.conf:
httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on
We've tried the following iptables rules on the firewall:
iptables -t nat - A PREROUTING -i "Interface for local net" -s ! "squid-machine" -p tcp --dport 80 -j DNAT -- "squid-machine:3128"
iptables -t nat -A POSTROUTING -o "Interface for local net" -s "172.21.0.0/16" -d "squid-machine" -j SNAT --to "localhost"
Why use -i and -o on the same interface?See iptables howto or try POSTROUTING on the outgoing interface but seems a routing thing!
iptables -A FORWARD -s "172.21.0.0/16" -d "squid-machine" -i "Interface for local net" -o "Interface for local net" -p tcp --dport 3128 -j ACCEPT
That doesnt work. What is wrong?
Thanks for your answers
-- *************************************************************************** / ''We can't become what we need to be by remaining what we are''\ \ ,, ,,/ ***************************************************************************
