transparent proxy in FC 6

lqchangba · 06-02-2007, 05:44 AM

when i run the command
#service squid restart
the following message appears

Stopping squid: 2007/06/02 16:23:50| parseConfigFile: line 2938 unrecognized: 'httpd_accel_host virtual'
2007/06/02 16:23:50| parseConfigFile: line 2939 unrecognized: 'httpd_accel_port 80'
2007/06/02 16:23:50| parseConfigFile: line 2940 unrecognized: 'httpd_accel_with_proxy on'
2007/06/02 16:23:50| parseConfigFile: line 2941 unrecognized: 'httpd_accel_users_host_header on'
[ OK ]
Starting squid: . [ OK ]

###########################################################
I have added these lines on httpd accelerator
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_users_host_header on
and i have used the following command of iptables
#iptables -t nat -A PREROUTING -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 3128
###############################################################
client side i use win Xp
i have used gateway as the gateway of my firewall
my proxy and firewall in in the same box.

digitalnerds · 06-02-2007, 04:22 PM

Hello

Squid 2.6 to 3.0 is not using http_accel* config lines anymore in order to be transparent
You need to add only a single line like

Code:

http_port 192.168.1.1:3128 transparent

where 192.168.1.1 is the ip you wanan bind squid on
or

Code:

http_port 3128 transparent

to listen on any available interface

iptables as usual

Code:

iptables -A PREROUTING -i eth1 -s 192.168.1.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -A FORWARD -i eth1 -j DROP

Note: change IP's as you need and make sure the interface (ethx) is the interface connected to the LAN and that has direct connection with the clients that will use squid server

and forwarding on either by adding the next into your startup scripts (rc.local)

Code:

echo 1 >/proc/sys/net/ipv4/ip_forward

or (i recommend) adding it to your sysctl.conf

Code:

net.ipv4.conf.default.forwarding=1

Regards
Andy
Regards