Re: Transparent Proxy and firehol problem

Tony Peña <[email protected]>
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <CALBaCdt3GTcLAyxVLp+Db7wz6AeNubJrOigak8XTsZmz3vULvQ@mail.gmail.com>
I can see logs normally from squid when is setted in browser

The wget and curl have to tested and yes the squid i setup in transparent
proxy because i copied from other network with same parameters in this one
just change wan with pppoe where before was eth0

Te version is 5 i can test with 6 if want
Il giorno mer 18 feb 2015 alle 08:09 AM Phil Whineray <[email protected]>
ha scritto:

> On Tue, Feb 17, 2015 at 11:20:01PM +0100, Simon Szustkowski wrote:
> > If the interface is called ppp0 by the kernel, why are you accessing it
> as ppp+ in the firehol config?
>
> ppp+ means match anything starting ppp, so this should be fine.
>
> > > On 17 Feb 2015, at 21:12, Tony Peña <[email protected]> wrote:
> > >
> > > Hi I used firehol with transparent proxy and everything works fine but
> with
> > > the option inface eth1 (lan) outface eth0 (wan)
> > >
> > > But today i must have to configure the same with pppoe so i have change
> > > eth0 with ppp+ but not works
>
> Which version of firehol are you using? That may be pertinent these
> days.
>
> > > I can see in the logs like ppp0 in cant out to same ppp0
> > >
> > > in the logs i see the packets blocked and some time in the request is
> like
> > > ppp0 can't go out with as ppp0 but with the ip of the peer.....
>
> Are you saying these are the browser requests? Odd.
>
> > > Any idea ? What i'm missing in the conf?
>
> I can't see anything obviously wrong with the config but I am not in
> a position to test it. I presume your squid is correctly set to
> transparent proxy? I expect that could cause odd problems if not.
>
> Could you run a controlled test, i.e. start the firewall then (try to)
> browse to somewhere new and extract the recent firewall logs so we can see.
> Ideally use wget or curl and report what it says too (timeout, connection
> refused etc.). Does your squid log have the request in it?
>
> Cheers
> Phil
> _______________________________________________
> Firehol-support mailing list
> [email protected]
> http://lists.firehol.org/mailman/listinfo/firehol-support
>
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.