Re: [squid-users] Make Squid in interception mode completely

From: Edmonds Namasenda <namasenda_at_gmail.com>
Date: Tue, 6 Dec 2011 17:19:55 +0300

Your diagram or illustration shows a difference with my illustration.
If you believe they are the same and getting header fields shown, look
through your firewall and squid acls.

# Edz.

On Tue, Dec 6, 2011 at 5:05 PM, Nguyen Hai Nam <nam.nh_at_nd24.net> wrote:
> Hi Edmonds,
>
> That's really like my setup right now. But, as Amos said, the traffic
> just pass from eth0 to eth1 but don't come to Squid, because it's
> bridged. Actually, when watching IP nat table, I still found some nat
> rules show up, but at client-side it still looks direct access. And
> more strange, if I use an other linux box from LAN to check out by
> curl -I http://something.com/ it's returned the header fields that has
> "Via: 1.1 (squid 3.2)". I have no idea why.
>
> At this moment, I still don't find more documentation from IPfilter
> for deeper discovery.
>
> ~ Neddie
>
> On Tue, Dec 6, 2011 at 12:03 PM, Edmonds Namasenda <namasenda_at_gmail.com> wrote:
>> Hai,
>> Seems your network set-up is what might be ruining your connection
>> expectations or the "default gateway" needs a rule (possibly using a
>> firewall) to direct all HTTP traffic to the squid box rather than to
>> the internet.
>>
>> Otherwise, think of the set-up below (with the Squid box the same as
>> the Gateway)
>>
>> Internet Router    >>   Eth0 |- Squid box & Default Gateway -| Eth1
>>>>   Switch    >>   LAN
>>
>> # Edz.
>>
>> On Mon, Dec 5, 2011 at 5:14 PM, Nguyen Hai Nam <nam.nh_at_nd24.net> wrote:
>>>
Received on Tue Dec 06 2011 - 14:20:01 MST

This archive was generated by hypermail 2.2.0 : Tue Dec 06 2011 - 12:00:03 MST