Re: forwarding loop

Article View: bit.listserv.openbsd-pf

Article #247

Back to bit.listserv.openbsd-pf Previous Next

#247

From: Daniel Hartmeier
Date: Tue, 15 Jan 2013 10:31

13 lines
1752 bytes

Wait, the squid server is on a separate host, on the $int_if side of the
firewall (the same side the clients are on)?

Then transparent proxying would require "reflection", and doesn't work, see
http://www.openbsd.org/faq/pf/rdr.html#reflect

If squid is seeing TCP_MISS errors, that probably means the clients are
using the proxy explicitely (not transparently), and the rdr is not
being used at all...

This worked for the past years how?

Daniel

Technical Details

Message-ID: <20130115101033.GA2410@insomnia.benzedrine.cx>

Path:

arc1-ca.pugleaf.net!o9ni8583wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!border2.nntp.ams2.giganews.com!border1.nntp.ams2.giganews.com!border3.nntp.ams.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!news.glorb.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <50F10ACD.9090605@eskk.nu> <20130114095023.GC8895@insomnia.benzedrine.cx> <50F42B02.70405@eskk.nu>

Show Full Headers

Complete Article Headers

X-Google-Thread: bffa70e3,65dda175aebfa248
X-Google-Attributes: gidbffa70e3,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.180.24.130 with SMTP id u2mr1731769wif.6.1358660267763;
        Sat, 19 Jan 2013 21:37:47 -0800 (PST)
Path: arc1-ca.pugleaf.net!o9ni8583wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!border2.nntp.ams2.giganews.com!border1.nntp.ams2.giganews.com!border3.nntp.ams.giganews.com!border1.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!news.glorb.com!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: daniel@benzedrine.cx (Daniel Hartmeier)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: forwarding loop
Date: 15 Jan 2013 02:31:57 -0800
Organization: None
Lines: 13
Message-ID: <20130115101033.GA2410@insomnia.benzedrine.cx>
References: <50F10ACD.9090605@eskk.nu>
 <20130114095023.GC8895@insomnia.benzedrine.cx>
 <50F42B02.70405@eskk.nu>
NNTP-Posting-Host: localhost.newsguy.com
Mime-Version: 1.0
NNTP-Posting-Date: 15 Jan 2013 10:31:57 GMT
X-Received-Bytes: 1080
Bytes: 1258
Content-Type: text/plain; charset=us-ascii

Reply to Parent Message