Search squid archive

Re: transparent proxy squid

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



mån 2006-04-17 klockan 09:03 +0000 skrev William Bohannan:
> Hi I have installed squid on a debian sarge system which is running off a
> usb key.  Two questions:
> 
> a) can I run squid the squid cache off the memory alone as to not age the
> usb key

Yes. Set "cahce_dir null" in squid.conf, and use cache_mem for your
cache. Or alternatively set up a tmpfs or ramfs mount point for the
cache.

> b) have tried to setup transparent bridge with no luck I have used the
> following options:
> 
> "internet -- bridge -- router -- local lan"
> 
> -> option1
> 
> iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port
> 3128
> iptables -A INPUT -i br0 -p tcp -d xxx.xxx.xxx.xxx -s 192.168.1.0 --dport
> 3128 -m state --state NEW,ESTABLISHED -j ACCEPT

For this to work your kernel needs to have the bridge-netfilter
integration enabled.

> -> option2
> 
> ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 --ip-destination-port
> 80 -j redirect --redirect-target ACCEPT
> iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port
> 3128

Never used ebtables redirect so I can't give much comments on this. But
you may need an INPUT rule as well if your INPUT rules is restrictive..

Basic functionality test: Does it work if the client is configured to
use the proxy?

Regards
Henrik

Attachment: signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signerad meddelandedel


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux