Re: [squid-users] OpenBSD + PF + Squid: forwarding loop

Hello Rob,
no this is the same machine :)

-- 
Cordialement,
Loïc BLOT,
Expertise en Systèmes UNIX, Sécurité et Réseaux
http://www.unix-experience.fr 
Le vendredi 31 mai 2013 à 04:58 -0700, Rob Sheldon a écrit :
> On 2013-05-30 21:34, Loïc BLOT wrote:
> 
> > Hello Rob,
> > I use OpenBSD and squid 3.3.4 in production environment, you'll 
> > exactly
> > what you need here:
> > http://www.unix-experience.fr/2013/create-a-powerfull-proxy-cache-with-squid-and-openbsd-2/#sthash.9SpWE1kn.dpbs 
> > [2]
> > Have a nice day
> 
> Thanks -- that looks like a good guide, and I wish I'd found it before 
> the other one.
> 
> However: it looks like your guide was written for a physical squid 
> server separate from a physical firewall, and other than that, I can't 
> find a significant difference between the configuration in your guide 
> and my problematic configuration.
> 
> Maybe there's some kind of routing issue with doing an rdr on a machine 
> running both the firewall and the proxy functions?
> 
> ...hmm. That might be it, actually. Since Squid is binding to the LAN 
> interface, trying to rdr packets coming in on the LAN interface back to 
> a service on the LAN interface won't work. I'll try setting http_port to 
> one of the other interfaces and see if that changes anything.
> 
> Thanks,
> 
> - R.