Re: transparent squid proxy

Thanks for the help, but it's not the problem going *to* squid, it's the 
problem of telling squid how to go get the information from the 
internet. Without an ip address, squid does not know where to go.

All the howtos I've read (many, many) all have got an ip address on the 
bridge. I don't want that. I thought that there may be an ebtables rule 
that helps.

Julian
Ignacio Rodriguez wrote:
> Hey dude... you need configure iptables to redict trafic to squid port
> nothing more than that...
> 
> search in google this 2 words...
> 
> ebtables squid...
> 
> there 5 or 6 how tos for you....
> 
> regards.
> ----- Original Message ----- 
> From: "Julian Lyndon-Smith" <[email protected]>
> To: <[email protected]>
> Sent: Tuesday, August 29, 2006 1:33 PM
> Subject: [Ebtables-user] transparent squid proxy
> 
> 
>> As an experiment, I wanted set up a "black box" that has two interfaces
>> (eth0 and eth1) that would act as a transparent squid proxy. I wanted to
>> be able to plug this device in line between the network and the router
>> and *not* to have to configure it at all.
>>
>> My first attempts have resulted in a partial success:
>> 1) I loaded up centos 4.3 server, installed iptables and ebtables.
>> 2) created a transparent bridge between eth0 (internal network) and eth1
>> (plugged into the router)
>> 3) plugged in the box - all traffic was passed over the bridge
>>
>> Next:
>>
>> 4) Added in squid as a transparent proxy, added an iptable rule
>> 5) all traffic except http was passed over the bridge, and http was
>> passed to squid which then downloaded what it needed.
>>
>> However:
>>
>> This scenario required the bridge to have an ip address on the network,
>> and a default gateway. As I mentioned, I did not want to have configure
>> the box at all (and therefore cannot have an ip address on the bridge).
>>
>>  From what I can gather, squid is receiving the client request, but I
>> presume what is happening is that squid has no idea on where to go to
>> get the information.
>>
>> Is it possible to add an ebtable / iptable rule to say "when coming from
>> the local machine on port x forward / use device eth1 ?
>>
>> Thanks.
>>
>> -------------------------------------------------------------------------
>> Using Tomcat but need to do more? Need to support web services, security?
>> Get stuff done quickly with pre-integrated technology to make your job
> easier
>> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
>> _______________________________________________
>> Ebtables-user mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/ebtables-user
>>
>>
> 
> 
> 
> 


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642