Re: Transparent proxy using FreeBSD 4.0

"Balgansuren.B" wrote:

> Hello, a.I have successfully installed Squid 2.4DEVEL2 w/DIKSD on the
> FreeBSD
> 4.0.
> b.I configured/compiled custom kernel of FreeBSD 4.0.
> c.I need help to configure IPFilter for Squid 2.4DEVEL2.
> d.I confused between IPFIREWALL and IPFilter. Which one I need to use
> with
> Squid 2.4DEVEL2? Thanks
> Balgaa

hello balgaa,

    in your customize kernel, include these lines:

        options IPFIREWALL
        options IPFIREWALL_FORWARD
        options IPFIREWALL_DEFAULT_TO_ACCEPT

    squid configuration:

        ./configure --enable-ipf-transparent
        httpd_accel_host virtual
        httpd_accel_port 80
        httpd_accel_with_proxy on
        httpd_accel_uses_host_header on

    in your rc.conf or rc.local:

        rc.conf -> gateway_enable="YES"
        or
        rc.local -> sysctl -w net.inet.ip.forwarding=1

    in your firewall rules:

        ipfw add fwd <ip_address_of_your_server>,3128 tcp from any to
any 80 in via <interface_card>

    if there is a http daemon running in your proxy server then include
these lines before the above firewall command to avoid forwarding loop:

        ipfw add accept tcp from any to 127.0.0.1 80 in via
<interface_card>
        ipfw add accept tcp from any to <ip_address_of_your_server> 80
in via <interface_card>

regards,

fooler.
Received on Sun Apr 09 2000 - 07:00:46 MDT