Hi Everyone. I just setup squid yesterday which was on top of the newest version of debian that i just installed. Well at first i installed squid and then found out there was a squid3 so i installed that. The only thing i changed in the squid.config so that everyone on the network could connect was the following:

http_access deny all

to http_access allow all.

Which worked perfectly. When i entered the proxy manually everything was able to connect perfectly. I had two issues:

1. I wanted to force everything to go through the proxy. So essentially if you didn't go through the proxy you couldn't connect to the internet.

2. Some devices i have don't have proxy settings to configure.

In this example say the ip of my squid server is 192.168.1.55

So i configured my router to pass out 192.168.1.155 as the default gateway rather than the routers ip (dhcp).

Second i followed the following article:
http://www.tuxradar.com/answers/432

so i changed
http_port 3128
to
http_port 80 transparent

then i removed my proxy settings from my clients and watched the log live to make sure everything was going through the proxy and nothing was. And yes i did the simple things like restarting the squid service. I see a lot of blogs that try to use iptables to route port 80 traffic to say 3128 port of the proxy but since i changed the port of the proxy to port 80 i think it would work just like in the referenced article above. Can anyone offer some advice. Any help would be appreciated

ncage,

When you configure transparent proxy, it means the squid proxy should be Default Gateway of the clients. in your case you have configure some other IP address.

Second, There is no issue on which port your squid is running on. Just configure iptables to redirect all 80 port traffic coming from client to your squid proxy port. EG. :

iptables -t nat -A PREROUTING -s <yournetwork> -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 80

test configuration without configuring proxy in browser. if it is success then save iptables configuration.

Best of Luck

Hi and thanks for the reply. Well actually i set the router to return the proxy servers ip address as the default gateway. So say the router is 192.168.1.1 and the proxy server is 192.168.1.55. When my clients grab an ip address (dhcp) their gateway will be 191.168.1.55. So the gateway for all the clients is the proxy server. So if glance at article i referenced they said they were able to configure it without using iptables. Since the browser by default will be sending all http traffic over port 80 and the proxy server port is also 80 shouldn't it just all work?

As an aside, if i go the iptables route will i also have to add port 443 (for SSL)?

Well in the end up ended up giving up. Why? Because routing SSL traffice through a transparent proxy is a lot harder. SSL is finicky (which it should be) and resist changing header information (the proxy would essential be a type of man-in-the-middle attack). http://www.rahulpahade.com/content/s...over-ssl-https.

Yes i'm sure its doable if i want to spend the time but right now i don't. First of all i already have a non-linux DNS on my network and i really don't want to switch to BIND.

So unfortunately i can't force everything like i wanted but at least i'll setup everything by default to go through it.