[squid-users] Linux 2.4 Firewall (iptables) & Transparent Proxy help

I've read the how to a dozen times now.
(http://www.tldp.org/HOWTO/mini/TransparentProxy.html)

I have squid on a remote box and is configured fine, but am having
problems with my nat/firewall config.

When I implement http://www.tldp.org/HOWTO/mini/TransparentProxy-6.html
the "first" method, I can get intermittent communication w/ the cache
server, but it doesn't always return everything. For example it might
only give me some of the images on a particular page and it is very
slow.

The problem with the method about is he's using a system w/ 1 nic as an
example. I have 2 nics.

Eth0 is the Public NIC
Eth1 is the Private NIC

The box is my firewall at my colo.

I have the following in my iptables config, which is based on a
rc.firewall script. It does have a lot of rules/chains too.

$IPTABLES -t nat -A PREROUTING -i $EXTERNAL -s ! 10.200.0.250 \
       -p tcp --dport http -j DNAT --to-destination 10.200.0.250:3128
$IPTABLES -t nat -A POSTROUTING -o $EXTERNAL -s $INTERNAL_NET \
       -d 10.200.0.250 -j SNAT --to-source 10.200.0.254
$IPTABLES -A ALLOW_SERVICES -s $INTERNAL_NET -d 10.200.0.250 \
       -i eth1 -o eth0 -p tcp --dport 3128 -j ACCEPT
       
       
Can anyone help?
Received on Wed Oct 02 2002 - 12:12:55 MDT