Hi,
I want to log direct web access over port 80 from misconfigured software
update processes etc.
The firewall logged a lot of access over port 80, the reverse lookup of
the used addresses is almost
useless. Therefore I changed the configuration:
pf redirects all connect requests for port 80 to port 3128
#added to squid.conf
http_port 127.0.0.1:3128 transparent
acl forwardport myport 3128
acl forwardip myip 127.0.0.1/255.255.255.255
http_access deny forwardip forwardport
# allow access to internet
http_access allow our_networks !ebay !useragent
Problem: squid 3.0pre6 now works as a perfect transparent proxy.
Whats's wrong?
Thanks
Reinhard