[squid-users] Squid and Mirrored Router Ports

From: Edward C. Jakosalem <list@dont-contact.us>
Date: Tue, 17 Apr 2007 20:55:45 +1000 (EST)

Hello,

I have posted this same problem before but I want to post it again because
I am pressured to make this work with Squid. I know that Squid's use is
either an accelerator or proxy or both. But we want Squid to _only_
capture web traffic and log them, that's all. As such, I have configured
my server to act as transparent proxy.

My server is running Fedora 5 with Squid 2.6 (just downloaded and
installed the latest version today). I also have 2 ethernet cards on this
server:
   eth0 - public IP
   eth2 - private IP and is directly connected to a router's _mirrored_
port. I can confirm that there is traffic originating from this
interface.

My squid.conf contains the following line which makes it a transparent proxy:
   http_port 3128 transparent

Also according to the docs, I added the following line to my iptables:
   -A PREROUTING -i eth2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

With this setup, my server should be up and capturing data from eth2. But
I still don't see any traffic being logged by Squid. I have configured my
browser to use this proxy server to check if it works and it does.

So what else do I need to do.

TIA,
Edward

_____________________________________
The vine Jane!!! The VINE!!! - Tarzan
Received on Tue Apr 17 2007 - 04:55:52 MDT

This archive was generated by hypermail pre-2.1.9 : Tue May 01 2007 - 12:00:01 MDT