LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 06-02-2007, 05:44 AM   #1
lqchangba
LQ Newbie
 
Registered: Feb 2007
Posts: 19

Rep: Reputation: 0
transparent proxy in FC 6


when i run the command
#service squid restart
the following message appears

Stopping squid: 2007/06/02 16:23:50| parseConfigFile: line 2938 unrecognized: 'httpd_accel_host virtual'
2007/06/02 16:23:50| parseConfigFile: line 2939 unrecognized: 'httpd_accel_port 80'
2007/06/02 16:23:50| parseConfigFile: line 2940 unrecognized: 'httpd_accel_with_proxy on'
2007/06/02 16:23:50| parseConfigFile: line 2941 unrecognized: 'httpd_accel_users_host_header on'
[ OK ]
Starting squid: . [ OK ]

###########################################################
I have added these lines on httpd accelerator
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_users_host_header on
and i have used the following command of iptables
#iptables -t nat -A PREROUTING -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 3128
###############################################################
client side i use win Xp
i have used gateway as the gateway of my firewall
my proxy and firewall in in the same box.
 
Old 06-02-2007, 04:22 PM   #2
digitalnerds
Member
 
Registered: May 2007
Distribution: Debian
Posts: 103

Rep: Reputation: 15
Hello

Squid 2.6 to 3.0 is not using http_accel* config lines anymore in order to be transparent
You need to add only a single line like

Code:
http_port 192.168.1.1:3128 transparent
where 192.168.1.1 is the ip you wanan bind squid on
or
Code:
http_port 3128 transparent
to listen on any available interface

iptables as usual
Code:
iptables -A PREROUTING -i eth1 -s 192.168.1.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -A FORWARD -i eth1 -j DROP
Note: change IP's as you need and make sure the interface (ethx) is the interface connected to the LAN and that has direct connection with the clients that will use squid server

and forwarding on either by adding the next into your startup scripts (rc.local)
Code:
echo 1 >/proc/sys/net/ipv4/ip_forward
or (i recommend) adding it to your sysctl.conf
Code:
net.ipv4.conf.default.forwarding=1
Regards
Andy
Regards

Last edited by digitalnerds; 06-02-2007 at 04:23 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
transparent proxy lqchangba Linux - Server 1 02-27-2007 10:25 AM
transparent proxy tsaravan Linux - Networking 10 02-06-2006 12:49 AM
transparent proxy tsaravan Linux - Newbie 3 01-11-2006 01:15 PM
transparent proxy mattsthe2 Linux - Networking 9 10-26-2005 08:44 AM
Transparent Proxy ilnli Linux - Networking 3 10-18-2004 06:01 PM


All times are GMT -5. The time now is 07:49 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration