On 29/11/10 22:07, jiluspo wrote:
clients -> squid -> router1
router1 -> squid -> client
with router1, squid, client on same subset.
router1 need to be distination routed to squid.
the tproxy setup fails but redirect port works fine when
client ->squid-> router1
router-> clients
Linux ubuntu 2.6.32-25-generic-pae #45-Ubuntu SMP Sat Oct 16 21:01:33 UTC
2010 i686 GNU/Linux
iptables v1.4.4
libcap-dev 1:2.17-2ubuntu1
libcap2 1:2.17-2ubuntu1
Thank you very much for this research jiluspo.
Can you state which Squid version you used to test please? and how it
was built.
Also, What do you mean by "but redirect port works fine"? The NAT
interception "REDIRECT"?
Amos
--
Please be using
Current Stable Squid 2.7.STABLE9 or 3.1.9
Beta testers wanted for 3.2.0.3