Transparent proxy with webcache in a bridge
Filipe <filipe_rf-/E1597aS9LRfJ/[email protected]> Thu, 19 Oct 2006 16:40:05 -0200
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <[email protected]> |
Hello, I've followed the steps in the article: http://freshmeat.net/articles/view/1433/ to get a bridge running with transparent squid.
The bridge is allowing all data to pass by the ethernets, it accepts all. Ebtables has only one rule:
bash# ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 --ip-destination-port 80 -j redirect --redirect-target ACCEPT
bash# iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port 3128
It almost works, but.....
The connections are being redirected to iptables:
5 240 REDIRECT tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 redir ports 3128
... and squid is treating it well
1161252534.833 49 192.168.0.222 TCP_DENIED/403 1430 GET http://freshmeat.net - NONE/- text/html
But the access denied page of squid doesn't returns to the browser. Also, netstat display data on the send queue of Squid:
bash# netstat -ant
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 1408 192.168.0.220:3128 192.168.0.222:1087 ESTABLISHED
Note the 1408 bytes on the send-queue.
What kind of problem this may be related?
Some information about my system:
Linux with kernel 2.6.12
ebtables version 2.0.6
iptables version 1.2.11
3 ethernet ( 2 are in the bridge and 1 not )
# brctl show
bridge name bridge id STP enabled interfaces
br0 8000.0000e8016335 no eth1
eth2
#ifconfig br0
br0 Link encap:Ethernet HWaddr 00:00:E8:01:63:35
inet addr:192.168.0.220 Bcast:192.168.0.255 Mask:255.255.255.0
..... suppressed ......
Thanks for any kind of help
_______________________________________________________
Yahoo! Acesso Grátis - Internet rápida e grátis. Instale
o discador agora!
http://br.acesso.yahoo.com
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642