-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Mostafa Faridi, On Sat, 29 Sep 2007 12:05:03 +0330 mostafa faridi <mostafafaridi@xxxxxxxxx> wrote: > Tek Bahadur Limbu wrote: > > Hi Mostafa Faridi, > > > > > > mostafa faridi wrote: > >> I am new user in squid I want use squid , my firewall is PF and my OS > >> is FreeBSD I want make my system for NAT. > >> > >> I would be grateful if someone help my I do this . > > > > You can check out the following URL to use Squid with PF. > > > > http://www.benzedrine.cx/transquid.html > > > > Which version of FreeBSD are you using? What kind of proxy server do > > you want to use squid for? Transparent or just a normal forward proxy? > > > > Since you will be using PF, remember to include the following > > parameter while compiling Squid either from source or from ports: > > > > "--enable-pf-transparent" > > > > Go for the latest stable release of Squid which is Squid-2.6.STABLE16 > > currently. > > > > You can find the source package from the URL below: > > > > http://www.squid-cache.org/Versions/v2/2.6/squid-2.6.STABLE16.tar.gz > > > > > > To achieve NATing using PF, the following tutorial will help: > > > > http://www.section6.net/wiki/index.php/Setting_up_a_Firewall_NAT_using_PF > > > > > > Personally for me, I am using IPFW over PF because I was introduced to > > IPFW first. > > > > However, both should do the job fine. > > > > Hope that helps. > > > > > > Thanking you... > > > > > > > >> > >> > >> > > > > > I go to http://www.benzedrine.cx/transquid.html and do everything but > when I type in termianl > > squid -k reconfigure I see this result > > [root@squid /home/mostafa]# squid -k reconfigure > 2007/09/29 09:43:39| parseConfigFile: line 4515 unrecognized: > 'httpd_accel_host virtual' > 2007/09/29 09:43:39| parseConfigFile: line 4516 unrecognized: > 'httpd_accel_port 80' > 2007/09/29 09:43:39| parseConfigFile: line 4517 unrecognized: > 'httpd_accel_with_proxy on' > 2007/09/29 09:43:39| parseConfigFile: line 4518 unrecognized: > 'httpd_accel_uses_host_header on' > The transparent config has changed in Squid-2.6 in comparsion to Squid-2.5. In fact it has been made easy! Instead of using: httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on Simply use: http_port 3128 transparent After changing the above lines, do "squid -k reconfigure". It should work out fine. Hope that helps. Thanking you... - -- With best regards and good wishes, Yours sincerely, Tek Bahadur Limbu System Administrator (TAG/TDG Group) Jwl Systems Department Worldlink Communications Pvt. Ltd. Jawalakhel, Nepal http://wlink.com.np/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQFG/2VFfpE0pz+xqQQRAkI2AKC9+k41lMXa4SmPzdPwyT0PJa47UQCgix+2 82FbNZyUDBYxzWfInuNaVW0= =st4/ -----END PGP SIGNATURE-----