Hi
I have setup squid +tproxy in bridge mode.The bridge works fine for the
clients in the same subnet.
If we connect clients in different subnet the requests gets to the squid
and the squid cannot reply.Each subnet has different gateway
Internet-----router------squid(bridge)-----Router-------client
In access log we can see TCP/MISS 504.
I can ping all the subnet client ip's from squid
If i add route add -net <Network ip of subnets> dev br0 the traffic of
other subnets does not get redirected to squid
usr/local/sbin/iptables -t mangle -N DIVERT
/usr/local/sbin/iptables -t mangle -A DIVERT -j MARK --set-mark 1
/usr/local/sbin/iptables -t mangle -A DIVERT -j ACCEPT
/usr/local/sbin/iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
/usr/local/sbin/iptables -t mangle -A PREROUTING -p tcp --dport 80 -j
TPROXY --tproxy-mark 0x1/0x1 --on-port 3128
Ebtables for redirecting
ebtables -t broute -I BROUTING --ip-source <ip> -i eth0 -p ipv4
--ip-proto tcp --ip-dport 80 -j redirect --redirect-target DROP
ebtables -t broute -I BROUTING --ip-source <ip> -i eth1 -p ipv4
--ip-proto tcp --ip-sport 80 -j redirect --redirect-target DROP
please Advise me
Thanks
Senthil