Re: Squid Opens Connections to Self

#define quoting(Henrik Nordström)
// The only platform where Squid is know to properly support transparent
// proxying without any modifications or external help is on Linux using
// ipfwadm. For all other it needs to be extended with the proper way to
// get the intended destination address (patches are happily accepted).

Julian Elischer has done some patches to FreeBSD-current to allow
the same kind of redirection available in linux. Has somebody here
tested them already ?

For more info, refer to http://www.freebsd.org/~julian/

Here's a extract:

...
Transparent proxy support for -current

    Against -current as of 08 June 1998 Patches to -current for transparent IP redirection (not DIVERT). This allows you to add a firewall rule such as

    ipfw add 2 fwd 207.76.205.82,4000 tcp from any to any 80 out xmit ng0

    which would divert all http sessions going out through ng0 to a local proxy server listenning at port 4000.
...

                                        Jonny

--
Joao Carlos Mendes Luis            M.Sc. Student
jonny@jonny.eng.br                 Universidade Federal do Rio de Janeiro