SQUID Transparent proxy problem.

sparc86 · 04-10-2008, 09:42 AM

Hello linuxquestions.org community,

I don't really know what's going on, but I want to have a transparent proxy with "Squid 3.0.STABLE4", so I took a reading on lots of documentation and step-by-step tutorials but it doesn't works.
Firstly I realized that I had to comment these lines:

Quote:

#httpd_accel_host virtual
#httpd_accel_port 80
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on

and then change it for:

Quote:

http_port 127.0.0.1:3128 transparent

So I did.

It's a FreeBSD box, so I have IPFW and then I've added the following line to (possibly) make this work (yes, the IP 10.1.3.4 is my personal desktop, I'm testing it just to myself before I add the entire /24 network):

Quote:

ipfw add 76 fwd 127.0.0.1,3128 tcp from 10.1.3.4 to any dst-port

In the end, I always get the same results, I try to access the web through the port 80 and I just get an error message from squid. Then I comment that line and reload the firewall script and everything's fine, I can surf on the net (but not through the SQUID).

It's really weird, since I can normally surf on the net when I manually add the port 3128 to my browser and it works perfectly, I have the access.log logging everything and so on.
So it's definitely a "transparent proxy" issue, maybe it's something wrong with that IPFW rule or with squid.conf itself, I have no idea for now.

Any idea about it?

Thanks in advance.

Regards.

sparc86 · 04-10-2008, 03:29 PM

PS: For your knowledge, it cannot be a firewall issue, because I can connect to the squid server when I try to access any website through the port 80, so it means that the redirection is ok, right?

However, I just get a squid error error message, not the real website (but I can still see the squid version on it, that's why I truly believe the IPFW port redirection is working fine)