Re: [squid-users] transparent proxy help

On 5/30/05, Henry <brassing@mac.com> wrote:
> $router /firewall/gateway = openbsd + PF
> $squidserver = freebsd
> and $desktops....
>
> I had squid installed on my $router for the time being and got a much
> faster machine for my $squidserver... I pretty much copied my
> squid.conf to the new server with some editing to match addresses...
> I setup the necessary routing and firewall rules I'm sure because...
> I can do direct proxying if I specify the proxy server on a machine,
> this works. But it will be tedious to upgrade all desktops to do this
> and not to mention complaints if someone tampers with it or why this
> needs to be done or new machines being added...
>
> Anyway... I can't however do transparent proxy because I -think-
> squid just doesn't want to work for whatever reason which I'm trying
> to figure out...
> Doing some diagnostic work I can see a $desktop connecting to $router
> which redirects it to $squidserver port 3128 and on $squidserver I
> can see $desktop connecting... but I don't see $squidserver
> connecting to www to access the site nor does access.log show anything.
>
> But of course I can direct proxy and telnet to squidserver on port
> 3128 and it shows up on access.log....
>
> In squid.conf I've set...
> httpd_accel_host virtual
> httpd_accel_port 80
> httpd_accel_with_proxy on
> httpd_accel_uses_host_header on
>
> Is there something else I missed? Nothing shows up in the squid logs
> when i -try- to transparent proxy...
>
>

http://www.benzedrine.cx/transquid.html has good info about
configuring squid with OpenBSD pf.

-- 
Kind regards
Abu Khaled