FC4 - How to setup Transparent Proxy with Dansguardian

RTX Networks · 09-11-2006, 09:37 AM

Hi all,

I am currently running Squid Proxy server and Dansguardian together on my server, I have squid set on port 3128 and DG to listen on port 8080.

Now everything works fine when i add the Proxy server manually in my browser, the question i have is how can i set it up so its transparent so i dont have to go round all the machines and also so that the users cant just turn the browser proxy off.

I have been playing about with it for a few days and just cant seem to figure it out

Can anyone please help

Current config is

Server ip 192.168.77.56
Squid on port 3128
IPtables rule to forward port 80 to 3128 (Transparent)
DG on Port 8080

Hope someone can help me

Thanks

Nick,

win32sux · 09-12-2006, 12:49 AM

Quote:

Originally Posted by RTX Networks

Current config is

Server ip 192.168.77.56
Squid on port 3128
IPtables rule to forward port 80 to 3128 (Transparent)
DG on Port 8080

sounds like all you're missing is these lines in your squid.conf:

Code:

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

and you probably wanna change your iptables rule so that it redirects the packets to port 8080 instead of 3128 (so that users are forced to use dansguardian)...