LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 07-11-2007, 05:59 AM   #1
csdhiman
Member
 
Registered: Mar 2007
Posts: 47

Rep: Reputation: 15
Transparent Proxy


i am using fedora core 4 as squid proxy server, my squid and firewll server is the same .
squid version is [squid-2.5.STABLE9-7]

i want to configure tarnparent proxy .
i have 2 lan cards eth0 internet ip,
eth1 : fake ip ( lan ip)

i have some questions regarding this..

with these lines in squid.conf (main lines)
-----------------------------------------
http_port 3128

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

acl lan src 192.168.66.0/24
http_access allow lan
------------------------------------

now pls tell me what will be the client settings (
as i am using no settings in browser + eth1 ip as gateway of client) is this ok or i have to add dns settings also .....

enabled ip forwarding in sysctl.conf
then i start the iptables with these rules

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128

is this sufficient or i have to configure SNAT

is their any way to make this proxy tranparent without MASQUARD settings

Last edited by csdhiman; 07-11-2007 at 06:01 AM.
 
Old 07-11-2007, 06:23 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
The iptables rule is OK. You just need to configure squid as transparent proxy by editing squid.conf:
Code:
http_port <Internal IP>:3128 transparent
Put your eth1 IP address in the above line.
 
Old 07-14-2007, 03:43 AM   #3
csdhiman
Member
 
Registered: Mar 2007
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory
The iptables rule is OK. You just need to configure squid as transparent proxy by editing squid.conf:
Code:
http_port <Internal IP>:3128 transparent
Put your eth1 IP address in the above line.

Sir This setting is not working in squid 2.5
[http_port <Internal IP>:3128 transparent]
works with squid > 2.5 versions ...

Tell me if i have to enter dns settings in client in transparent proxy .
 
Old 07-14-2007, 09:05 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
When you use transparent proxy the dns requests are done by the clients and not by the proxy sever, so you have to configure your clients to use a dns server.
Usually you can setup a local caching dns server and configure clients to use this to speed things up.
 
Old 07-18-2007, 07:34 AM   #5
csdhiman
Member
 
Registered: Mar 2007
Posts: 47

Original Poster
Rep: Reputation: 15
Thanks a lot
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
transparent proxy tsaravan Linux - Networking 10 02-06-2006 12:49 AM
transparent proxy tsaravan Linux - Newbie 3 01-11-2006 01:15 PM
How to transparent proxy depam Linux - Software 3 12-30-2005 12:33 PM
transparent proxy mattsthe2 Linux - Networking 9 10-26-2005 08:44 AM
Transparent Proxy krock923 Linux - Networking 1 04-28-2005 06:43 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:52 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration