🚀 go-pugleaf

"maher" <maher@mimos.my> wrote in message news:3ACA8FB2.ADA69A68@mimos.my...
> KW wrote:
> >
> > We didn't have to change our firewall rules..   as long as you can get
> > out on the masq you should be ok..   far as setting up squid, you can
> > pretty much install the RPMS and goto the squid.conf file and go through
> > it.  The .conf explains itself pretty well.  If you want to run  it as a
> > transparent proxy... you simply use prerouting to grab all packets on 80
> > and send them to 3128 on squid... ;)
>
> BTW, how do you do that? is it using ipchains to redirect packets from
> 80 to 3128?

Prerouting ... sounds like iptables to me.  Anyway... below is a setup for
ipchains.

eg. you have 2 network card on the computer and you already have packet
forwarding enabled and set up via ipchains.

Internet<---->(203.x.x.x (dynamic))Server With Squid (192.168.1.1)<---->Your
Local LAN (192.168.1.x)

# A few things needed for transparent proxying
ipchains -A input -p tcp -d localhost 80 -j REJECT
ipchains -A input -d 192.168.1.1/32 80 -p tcp -j REJECT
ipchains -A input -d 192.168.1.1/32 80 -p udp -j REJECT

# Redirect things to port 80 to port 3128
ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 80 -p tcp -j REDIRECT 3128
ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 80 -p udp -j REDIRECT 3128

# Optionally, you can also redirect SSL and FTP
ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 443 -p tcp -j REDIRECT 3128
ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 443 -p udp -j REDIRECT 3128
ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 21 -p tcp -j REDIRECT 3128
ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 21 -p udp -j REDIRECT 3128

Your squid needs to be configured as a HTTPD accelerator as well.

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

=-
Elem103