17.8 Transparent Proxying with ACC Tigris digital access server

From: Faisal Naseer <faisal@dont-contact.us>
Date: Thu, 30 Dec 1999 13:49:53 +0000

17.8 Transparent Proxying with ACC Tigris digital access server

I've been reading the following and have trying to add the following
lines. But when is do the following, none of my users are able to log
on? strange?

Step 1 is to create filters that allow local traffic to pass. Add as
many as needed for all of your address ranges.

        ADD PROFILE IP FILTER ENTRY local1 INPUT 10.0.3.0 255.255.255.0
0.0.0.0 0.0.0.0 NORMAL
        ADD PROFILE IP FILTER ENTRY local2 INPUT 10.0.4.0 255.255.255.0
0.0.0.0 0.0.0.0 NORMAL

****> Question ! is local1 my proxy server name? then what is local2 ¿

Step 2 is to create a filter to trap port 80 traffic.

        ADD PROFILE IP FILTER ENTRY http INPUT 0.0.0.0 0.0.0.0 0.0.0.0
0.0.0.0 = 0x6 D= 80 NORMAL
****>this is fine

Step 3 is to set the "APPLICATION_ID" on port 80 traffic to 80. This
causes all packets matching this filter to have ID 80 instead of the
default ID of 0.

        SET PROFILE IP FILTER APPLICATION_ID http 80

Step 4 is to create a special route that is used for packets with
"APPLICATION_ID" set to 80. The routing engine uses the ID to select
which routes to use.

        ADD IP ROUTE ENTRY 0.0.0.0 0.0.0.0 PROXY-IP 1
        SET IP ROUTE APPLICATION_ID 0.0.0.0 0.0.0.0 PROXY-IP 80

Step 5 is to bind everything to a filter ID called transproxy. List all
local filters first and the http one last.

        ADD PROFILE ENTRY transproxy local1 local2 http

****> i dont understand this *****

regards,
faisal naseer
Received on Thu Dec 30 1999 - 02:03:11 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:50:08 MST