Transparent proxy(squid) on non-gateway system

prayag_pjs · 09-16-2010, 01:34 AM

Hi,

I can very well configure squid transparent proxy on gateway server.

But i want the squid transparent proxy on non-gateway system as i already have hardware firewall installed.

i.e i want to redirect all the traffic coming through my gateway (hardware firewall) 192.168.200.1 to my squid server 192.168.200.3 on port 3128.

How it is possible? Without transparent proxy by directly giving proxy ip in browser i can access internet but how to do it in transparent mode?

Paintball_Star7 · 09-16-2010, 07:58 PM

I have been searching the Internet looking for a solution to the exact question you pose. I'm looking forward to everyones ideas.

Thanks,
Chris

HasC · 09-16-2010, 08:33 PM

hardware firewall? isn't it a linux-based computer? can't you just redirect all traffic your gateway receives on port 80 to your proxy?

prayag_pjs · 09-16-2010, 10:35 PM

Hi,

Quote:

can't you just redirect all traffic your gateway receives on port 80 to your proxy?

HasC,same thing i m asking all!!!

HasC · 09-17-2010, 07:00 AM

Quote:

Originally Posted by prayag_pjs

Hi,

HasC,same thing i m asking all!!!

ok, let me re-phrase...

you're not giving enough info. what distro? how's your network configuration? iptables rules? route tables? and that's assuming your gw is indeed a linux-based computer, and not some cisco-or-something-like-that hardware.

prayag_pjs · 09-17-2010, 07:10 AM

Hi,

I have Harware Firewallmeans Firewall is not Linux System;

Its Fortigate Router Cum Firewall;

Squid is separate machine having CentoS with squid installed ....

HasC · 09-17-2010, 07:28 AM

then you should refer to your firewall manuals or do some google on it, and see if that firewall supports port forwarding.
on linux it will probably be a matter of using one iptables "REDIRECT" rule, like this:

Code:

# iptables -t nat -I PREROUTING -p all -s <your-LAN-net-address> --dport 80 -j REDIRECT --to <your-squid-host-IP>:3128

don't know how your firewall could handle that

prayag_pjs · 09-17-2010, 09:18 AM

hi i think you gave me the solution let me try and let you know ...

gambitsquid · 09-22-2010, 01:03 AM

Does it works? I want to apply this to our network also because We already ISA Server and I want to add this as an additional. Let me know your thoughts. Thanks