Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game. |
| Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
 |
GNU/Linux Basic Guide
This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.
Click Here to receive this Complete Guide absolutely free. |
|
 |
04-27-2006, 09:09 PM
|
#1
|
|
Member
Registered: Dec 2005
Location: italia
Distribution: Debian etch stable
Posts: 532
Rep:
|
transparent squid
To use squid as a transparent proxy accellerator reverse and etc. the httpd_accel_port has to be 80 , if i redirect traffic with the iptables it can be any port i want expecially with squid on the gateway ant the www server on an internal machine,if i redirect from 80 to 3128 it has to be httpd_accel_port 3128 ...  ....  .....
Last edited by gabsik; 04-27-2006 at 09:16 PM.
|
|
|
|
04-28-2006, 01:18 AM
|
#2
|
|
Guru
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870
|
Quote:
|
Originally Posted by gabsik
To use squid as a transparent proxy accellerator reverse and etc. the httpd_accel_port has to be 80 , if i redirect traffic with the iptables it can be any port i want expecially with squid on the gateway ant the www server on an internal machine,if i redirect from 80 to 3128 it has to be httpd_accel_port 3128 ...
|
ummm, what exactly is your question?? 
|
|
|
|
04-28-2006, 02:39 AM
|
#3
|
|
Member
Registered: Dec 2005
Location: italia
Distribution: Debian etch stable
Posts: 532
Original Poster
Rep:
|
For sure i'haven'got clear the function of a reverse proxy,i have the guide from the squid-cache.org but there is still some obscurity.So,when i use squid as reverse,transparent for clients connecting to my webserver from the internet untrusted httpd_accel_port has to be 80,acting like this as a firewall proxy(i have a web server but it is just on 443,actually),i'm using an ACL also for ftp.
It's not going to be a firewall and i don't want it to be for my trusted clients in my lan to connect to my webserver and for my trusted browsers i want it to do caching and speeding up things while they browse the internet,is this an httpd_accell?
At the end i want squid to be a protection plus the iptables for the servers in DMZ against clients connecting from internet.(http.https,ftp,smtp,pop3-ssl,ircd),anyclient(also considering i have https and pop3-ssl,and ssl dosn't handle to be proxied,right?).For my trusted clients it should help for privacy(tor) and for caching.
It's complicated also for the iptables,for the trusted clients,because of tor, i don't know where to redirect what ???And for untrusted internet that port 80 when i have only https:443!Chaos!!!!!!!!!!!!!!!!!!
Last edited by gabsik; 04-28-2006 at 02:57 AM.
|
|
|
|
08-10-2008, 07:01 PM
|
#4
|
|
LQ Newbie
Registered: Aug 2008
Posts: 3
Rep:
|
transparent squid
Quote:
Originally Posted by gabsik
For sure i'haven'got clear the function of a reverse proxy,i have the guide from the squid-cache.org but there is still some obscurity.So,when i use squid as reverse,transparent for clients connecting to my webserver from the internet untrusted httpd_accel_port has to be 80,acting like this as a firewall proxy(i have a web server but it is just on 443,actually),i'm using an ACL also for ftp.
It's not going to be a firewall and i don't want it to be for my trusted clients in my lan to connect to my webserver and for my trusted browsers i want it to do caching and speeding up things while they browse the internet,is this an httpd_accell?
At the end i want squid to be a protection plus the iptables for the servers in DMZ against clients connecting from internet.(http.https,ftp,smtp,pop3-ssl,ircd),anyclient(also considering i have https and pop3-ssl,and ssl dosn't handle to be proxied,right?).For my trusted clients it should help for privacy(tor) and for caching.
It's complicated also for the iptables,for the trusted clients,because of tor, i don't know where to redirect what ???And for untrusted internet that port 80 when i have only https:443!Chaos!!!!!!!!!!!!!!!!!!
|
please tell me exactly what should make in squid.conf?and what should iptable return?i use squid 2.5 with ubuntu 6.06
i really need help!
|
|
|
|
| Thread Tools |
Search this Thread |
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT -5. The time now is 10:02 AM.
|
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|