Re: [squid-users] Squid and Mirrored Router Ports

From: Edward C. Jakosalem <list@dont-contact.us>
Date: Tue, 17 Apr 2007 21:20:22 +1000 (EST)

That's pretty much it. Those 2 configs are the only ones I read that
should serve the purpose. Did you actually make it to work on your server?
Did you have to compile squid with '--enable-ipf-transparent'?

Thanks for your reply Paul.

TIA,
Edward

> What options did you configure your squid with, as I had a similar issue
> on FreeBSd and transparent proxy, and did not configure
> --enable-ipf-transparent
>
> cheers
>
> On Tue, 2007-04-17 at 20:55 +1000, Edward C. Jakosalem wrote:
>> Hello,
>>
>> I have posted this same problem before but I want to post it again
>> because
>> I am pressured to make this work with Squid. I know that Squid's use is
>> either an accelerator or proxy or both. But we want Squid to _only_
>> capture web traffic and log them, that's all. As such, I have configured
>> my server to act as transparent proxy.
>>
>> My server is running Fedora 5 with Squid 2.6 (just downloaded and
>> installed the latest version today). I also have 2 ethernet cards on
>> this
>> server:
>> eth0 - public IP
>> eth2 - private IP and is directly connected to a router's _mirrored_
>> port. I can confirm that there is traffic originating from this
>> interface.
>>
>> My squid.conf contains the following line which makes it a transparent
>> proxy:
>> http_port 3128 transparent
>>
>> Also according to the docs, I added the following line to my iptables:
>> -A PREROUTING -i eth2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports
>> 3128
>>
>> With this setup, my server should be up and capturing data from eth2.
>> But
>> I still don't see any traffic being logged by Squid. I have configured
>> my
>> browser to use this proxy server to check if it works and it does.
>>
>> So what else do I need to do.
>>
>> TIA,
>> Edward
>>
>>
>> _____________________________________
>> The vine Jane!!! The VINE!!! - Tarzan
>>
>>
>>
>>
>
>
Received on Tue Apr 17 2007 - 05:20:30 MDT

This archive was generated by hypermail pre-2.1.9 : Tue May 01 2007 - 12:00:01 MDT