I have a debian sarge 3.1 2.6.On my lan gateway(2eths) i have squid with privoxy as parent .They work great for my lan's browsers pointed to 8118 privoxy port and that's what i use them for.The iptables is:
$IPT -t nat -A PREROUTING -s $MYLAN --dport 80 -j REDIRECT --to-port 8118
right?
I want squid also to filter incoming internet clients but i wouldn't have it to listen on eth0 also because squid is working with privoxy and is not going to allow clients in at all when parent of privoxy!
I have tryied the above iptables with 3128 instead of 8118 and doesn't allow communications,if i want to use squid directly while is still privoxy parent , doesn't work.
A solution could be have two squid's instances but i honestly don't like the idea , but if it is the last chance ... this way i will have traffic incoming and outgoing on two distinct channels , is it ?
What do you think ?