LinuxSA Mailing list archives

Index: [thread] [date] [subject] [author]

  From: Daryl Tester <dt@picknowl.com.au>
  To  : LinuxSA <linuxsa@linuxsa.org.au>
  Date: Wed, 23 Feb 2000 22:28:27 +1030

Re: Transparent Proxy problems: no address for squid, please help

James Morgan wrote:

<HTML deleted>

> I am trying to set up a transparent proxy. I know that squid works
> however when I redirect http traffic (port 80) to the proxy (port
> 8080) squid doesn't receive the address of the site it is to visit
> only the location of the page.

Yes, that's why it's transparent; the browser doesn't know it's
being funnelled through a proxy.  The proxy determines who the
destination is by the original destination IP address that the
browser attempted to connect to.  I can't remember (been a while
since I've done this with squid) but does squid do transparent
proxying out of the box?

> ipchains -A input -p tcp -s 192.168.1.0/24 -d 0/0 80 -j REDIRECT 8080

Is this ipchain set up on your border router?

You will probably also need to set the configuration option that
allows you to pass the Host: header through squid, otherwise those
pesky sites which map multiple domains onto a single IP address can
cause interesting problems.

Regards,
  Daryl Tester

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject

Index: [thread] [date] [subject] [author]

Return to the LinuxSA Mailing List Information Page