[squid-users] RE: Need to run transparent?

From: John C. Gale <John_Gale@dont-contact.us>
Date: Wed, 11 Jul 2001 09:17:36 -0400

> Subject: Need to run transparent?
> Date: Tue, 10 Jul 2001 14:36:11 -0400
> From: "Vosburgh, Brian P, CTR, WHS/REF" <bvosburgh@ref.whs.mil>
>
> My cache server sits on the same subnet as my firewalls, we use F5's BigIP
> to direct traffic over specific firewalls. For port 80 I'm trying to send
> all port 80 to Squid. If I set my browser specifically to the cache address
> everything works fine, but if I move port 80 traffic to the squid pool on
> the bigip nothing passes. Any ideas?

Squid needs to be set up to proxy transparently. Did you do that?
Otherwise, the client sees a response from squid instead of yahoo.com
which won't work. Transparency, on the other hand, rewrites the IP headers
when sending info back to the client so it never even realizes it was proxied.

- John

-- 
Each new user of a new system uncovers a new class of bugs.
		-- Kernighan
Received on Wed Jul 11 2001 - 07:17:49 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:06 MST