On 09.05.2012 03:07, Vinicius R. Baenas wrote:
Hello,
I wonder if someone could use the TPROXY with Shorewall and
transparent Squid with using the routing rules on shorewall (tcrules)
for hosts / networks (LAN) with multiples providers (WANs) directly
from the internal network on port 80 (with TPROXY transparent squid
or
REDIRECT).
On this issue, the routing rules is not work propertly because the
source is the firewall ($FW) not the hosts or networks (LAN).
My guess is the TPRoxy interception (spoofing) is not working...
Thank you...
REDIRECT uses NAT which erases the IP addresses and would always lead
to the behaviour you describe.
TPROXY would only result in such behaviour if not working. But you
don't say what software versions you have on the box running Squid.
TPROXY is new enough that specific minimum versions are still very
important and bugs exist in uncommon use-cases.
wiki.squid-cache.org/Features/Tproxy4 covers the specifics.
Amos
