Re: squid intercept config

[Monah Baki <monahbaki@xxxxxxxxx>]

root@ISN-PHC-CACHE:/home/support # pfctl -s nat
No ALTQ support in kernel
ALTQ related functions disabled
rdr pass inet proto tcp from 10.0.0.0/8 to any port = http -> 10.0.0.24 port 3129

On Thu, Mar 5, 2015 at 1:08 PM, Yuri Voinov <yvoinov@xxxxxxxxx> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Can you run pfctl -s nat state on proxy box?

06.03.15 0:05, Monah Baki пишет:

> Ok let me ask the client tomorrow to run telnet 10.0.0.24 80 from
> a workstation
>
> Thanks for he help Yuri
>
> On Thu, Mar 5, 2015 at 1:02 PM, Yuri Voinov <yvoinov@xxxxxxxxx>
> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>>
>> Sorry, I'm wrong. Netstat on host can't show redirected
>> listeners.
>>
>> Need to check it externally.
>>
>> 05.03.15 23:59, Monah Baki пишет:
>>> On 10.0.0.24
>>>
>>> root@ISN-PHC-CACHE:/home/support # netstat -an Active Internet
>>> connections (including servers) Proto Recv-Q Send-Q Local
>>> Address Foreign Address        (state) tcp4       0     52
>>> 10.0.0.24.22 96.255.8.226.50911 ESTABLISHED tcp4       0      0
>>> *.3129 *.*                    LISTEN tcp4       0      0
>>> *.3128 *.*                    LISTEN tcp4       0      0 *.81
>>> *.*                    LISTEN tcp6       0      0 *.81 *.*
>>> LISTEN tcp4       0      0 *.22 *.*                    LISTEN
>>> tcp6       0      0 *.22 *.*                    LISTEN tcp6
>>> 0      0 ::1.562 ::1.40066 ESTABLISHED tcp6       0      0
>>> ::1.40066 ::1.562 ESTABLISHED tcp6       0      0 *.561
>>> *.* LISTEN tcp6       0      0 *.562                  *.*
>>> LISTEN tcp4       0      0 *.199                  *.* LISTEN
>>> tcp4       0      0 *.10000                *.* LISTEN udp4
>>> 0      0 *.3401                 *.* udp4       0 0 *.34985
>>> *.* udp4       0      0 *.* *.* udp4       0      0 *.161
>>> *.* udp4       0 0 *.162                  *.* udp4       0
>>> 0 *.10000 *.* udp4       0      0 127.0.0.1.123          *.*
>>> udp6       0 0 fe80::1%lo0.123        *.* udp6       0      0
>>> ::1.123 *.* udp4       0      0 10.0.0.24.123          *.* udp6
>>> 0 0 *.123                  *.* udp4       0      0 *.123 *.*
>>> udp4       0      0 *.514                  *.* udp6       0 0
>>> *.514                  *.*
>>>
>>>
>>>
>>> On Thu, Mar 5, 2015 at 12:12 PM, Yuri Voinov
>>> <yvoinov@xxxxxxxxx> wrote:
>>>
>>> - From your PC run telnet 10.0.0.24 80. You've seen if TCP
>>> socket opens.
>>
>>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJU+JuSAAoJENNXIZxhPexGmkMIAJQNjE4TwhTnO1hI+jqWgG06
XmPpDOkpv6xiMezh4NrgMNA3YRDysjEXHBywMlBop92/iLAehv1nyadMhIdWmPj0
im9RFuHVgTiEz9Fr7llc6jyz6oEkp4Ne3//FilvII0X2M8tnSknhiMhYliuloX8p
98IjTJPWDsYeEqURcwbxtGCz431GrpLmKTZkxQuw43a1hIQha4570prmbvcwU1xP
TLgv/WhltGRJyXszr3pwh1R/6cM8UYCK8iNgxn6KJvh2x+8hyc5avyttEbmyQDz+
JfuZoOyCyNU321yiONFS4EaPRWZsoUv+s59mS37m8gSuGIED6aKWlgceRE4OOgQ=
=t9CZ
-----END PGP SIGNATURE-----

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users