Single direction redirection on bridge br0

systemlordanubis · 02-09-2011, 03:04 PM

Hi All,

I'm currently setting up a squid proxy which will be installed on a debian system configured as a bridge eth0/eth1 as br0.

The problem I'm having is that port 80 requests are being proxied both ways where I only want the requests coming in via eth1 to be proxied.

Is there a way to do this? I've already tried changing the "-i br0" in the iptables redirection to "-i eth1" but no data appears to go through it.

Thanks
Anubis.

acid_kewpie · 02-10-2011, 08:02 AM

you could filter using the mac module to imply traffic coming from an downstream router. if that fits with your architecture. In general though, transparent proxies are pretty horrible I think, nothing like making a browser explicitly go to a proxy for web access, especially if it's done via proxy.pac files unbeknownst to the user.

TimothyEBaldwin · 02-16-2011, 03:25 PM

You need the physdev iptables module.