Configure Transparent proxy on Centos 7

shipon_97 · 08-13-2015, 12:28 AM

Hi Friends ,

I am using "CentOS Linux release 7.1.1503 (Core)" . I can successfully configured proxy server on it and can browsing using squid .

But Now I want to use it as transparent proxy . so I give the below rules :

===========================================================
eth0 : 192.168.1.85

eth1 : 10.134.11.46

iptables -I INPUT -s 10.134.11.0/24 -p tcp --dport 3128 -j ACCEPT

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to 192.168.1.85:3128

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

=============================================================

But its not wokring ... I am new on centos 7 , would anybody please help me ?

auge · 08-13-2015, 03:52 AM

Why DNAT? Please explain. You better make the squid listen on the internal interface and let it do the rest. This configuration with another private IPv4 in 10/8 looks like there is some setup like:
Client 192.168.1.70 <=> Router AND squid 192.168.1.85 dual-homing 10.134.11.46 <=> upstream-router 10.134.11.1

Quote:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-ports 3128

^^ correct
Now put this in squid.conf

Quote:

http_port 3128 transparent