Hey!

I've installed Squid Proxy. I'm working on getting it working for DNS, WWW, & FTP. Ideally it would trasnparently hand caching of all 3 for all machines on my LAN.

I would like to use it's internal DNS Cache for all the machines behind the machine it's installed on (and not have to worry about installing named). Is this possible? If so how? It doesn't appear to be listening on tcp/domain or upd/domain. How to I get it listening to tcp/domain or upd/domain?

Also, I tried 'misserably' lastnight to get the www transparently proxing. I'm using iptables... What's the command to forward all (Internal Net - INTLAN or Internal Interface INTIF) port 80 traffic to another port, like 8080?

Thanks,

iptables -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

note that eth0 is not my internet interface



squid is listening on port 3128 by default

Ok. I'll give that a try. Hopefully it works. What I was trying was pretty close to that, but it didn't seem to be working.

That's ok. eth0 is not my internet itnerface either.

That brings up another one of the issues I keep having. should I be even bother with using eth1 (the NIC that my Cable modem is plugged into) or should I go pretty much always with ppp0? eht1 (the NIC) has not IP information when I run /sbin/ifconfig

I understand that.

Squid doesn't appear to be handling DNS queries. Is that cause it only handles them for attempts by something to port 3128, or is there something that I'm missing? As when I set machine's (that are behind the Squid/FW machine) DNS to the ip of the Squid/FW machine DNS fails (nslookup returns server not responding). As soon as I set the DNS on those machines back to my ISP's DNS server things work find (they are still going through the Squid/FW machine to get out.

To handle 'transparent' FTP I would need to do:

iptables -A PREROUTING -i eth0 -p tcp -m tcp --dport 21 -j REDIRECT --to-ports 3128

right?

I believe that squid caches dns info for requests on the port it's using. It will use the nameservers in /etc/resolv.conf unless you give it certain ones to use in the config file

eth0 is the interface my clients connect to. eth1 is my cable modem

I also have clients on eth2

so the rules I use are

-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -i eth2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

you could also setup the proxy in your browser

As far as ftp transparent proxy I would say that I don't think it can do it


Look into a program called Frox


http://www.hollo.org/frox/