transparent proxy
 

Hi,

Following network scenario:

1) Redhat 9 (192.168.0.1)
2) Squid for proxy
3) Gateway - Router (192.168.0.254) for leased circuit between A to B for ERP system
4) All the clients default Gateway is No.3 mentioned above
5) All the clients DNS ip is 192.168.0.1

Please guide step by step procedure to setup transparent proxy. Also please let me know the associate software requirements.

thanks in advance

regards,

T. Saravana

According to a quick Google search, you could try http://www.faqs.org/docs/Linux-mini/...rentProxy.html

try tldp.org/HOWTO/TransparentProxy.html

Thank you for your reply.

But I would point out that I have already a gateway to connect to our Head Office for ERP access and how do I configure tranparent proxy where I have specify gateway.

Thank you for your reply.

But I would point out that I have already a gateway to connect to our Head Office for ERP access and how do I configure tranparent proxy where I have specify gateway.

Here's the rule for iptables on my gateway for running all http through the proxy on the same machine:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080

Hi,

We have cisco router as a getway which is connected through leased circuit to our Head office for access ERP system. All the client machines gateway is configured to this router ip. Now I have another system which is proxy for Internet connection. In this scenario how do I make transparent proxy.

regards,

T. Saravana

How many connections to the Internet do you have?

To make a proxy transparent, it must sit between the users and the router, otherwise users will need to set the ip number of the proxy.
To sit between, it needs to take the ip number of the router,
or be a bridged device with no ip numbers, using ebtables and layer2 filtering.

We have about 50 proxy connections to access Interent.

We have router connected to leased circuit exclusively to access ERP which is at Head Office. This has been configured as gateway in all the users' system.

We have another system which meant for Interent connection and running squid proxy server. This ip we have configure to all the users' browsers to access Internet. Now I have to have log of all the users access and hence I planned to have transparent proxy. Please let me know if there is any other efficient method which I implement by fulling my requirment logging.

Further, I not familiar with bridge or ebtables. Please let me know briefly about this if this can help my requirement or for my knowledge.

regards,

T. Saravana

I thought in the beginning that you could only access the internet with the ERP circuit.

With another internet connection it looks like a standard connection system..
It won't be transparent as you probably need to keep the ERP router as a gateway setting, so each user needs to have their browser configured to use the proxy.

Make sure the pc with squid can connect to the internet ok, then with a standard install of squid, change one user's browser settings to use the squid proxy. If it works ok, change the rest.

Hi,

I am sorry to bother you.

Can you please let me know step-by-step guide to setup bridged device with no ip number, using ebtables and layer 2 filtering. Also let me know the advantages and disadvantages.

regards,

T.Saravana