All of lore.kernel.org
 help / color / mirror / Atom feed
From: Andreas Unterkircher <unki@netshadow.at>
To: linux-admin@vger.kernel.org
Cc: "Adrian C." <drupix@gmail.com>, Luca Ferrari <fluca1978@infinito.it>
Subject: Re: transparent proxy
Date: Sat, 05 Feb 2005 21:22:12 +0100	[thread overview]
Message-ID: <42052AF4.3050809@netshadow.at> (raw)
In-Reply-To: <60a746890502051142726e2571@mail.gmail.com>

i'm currently using squid 2.5.7 from debian sid with ldap authentication 
and redirectors (squidGuard and antivirus
scanning) - have no problem with this - also in transparent-proxy mode.

as far as i know you must (?) use these options in the squid.conf, 
because squid has to passthru the http-headers
of the client - has something todo with http/1.1 I  guess. more infos 
you can find here:

http://squid-docs.sourceforge.net/latest/book-full.html#AEN2457

Andreas

Adrian C. wrote:

>Don't know why but all of my squid accel ateempts turned out pretty
>unstable (as in crash for no apparent reason). I have tried both squid
>2.5 and 3.0. Maybe you guys had more luck than me. Is there something
>i miss? Without the httpd_accel it works fine.
>
>--Adrian.
>
>
>On Sat, 05 Feb 2005 19:22:22 +0100, Andreas Unterkircher
><unki@netshadow.at> wrote:
>  
>
>>Don't know if you still have this problem. But maybe you are missing
>>some lines in your squid configuration.
>>You must tell squid, that it should act als httpd accellerator...
>>
>>httpd_accel_host virtual
>>httpd_accel_port 80
>>httpd_accel_with_proxy on
>>httpd_accel_uses_host_header on
>>
>>Jens Knoell wrote:
>>
>>    
>>
>>>Luca Ferrari wrote:
>>>
>>>      
>>>
>>>>Hi,
>>>>I'm trying to use a machine as a transparent firewall/proxy, using
>>>>iptables as described in the transparent proxy mini howto:
>>>>iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
>>>>--to-port 8080
>>>>
>>>>where eth0 is my internal interface (eth1 is connected directly to
>>>>the router). Now, when I try to browse the web, i always get the
>>>>squid error page saying that the url "/" cannot be retrieved. For
>>>>example, going to www.google.com is translated as /.
>>>>Any idea?
>>>>
>>>>Thanks,
>>>>Luca
>>>>
>>>>
>>>>        
>>>>
>>>That sounds like a faulty squid configuration. What does squids
>>>logfile say?
>>>
>>>Jen
>>>-
>>>To unsubscribe from this list: send the line "unsubscribe linux-admin" in
>>>the body of a message to majordomo@vger.kernel.org
>>>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>>      
>>>
>>-
>>To unsubscribe from this list: send the line "unsubscribe linux-admin" in
>>the body of a message to majordomo@vger.kernel.org
>>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>
>>    
>>
>-
>To unsubscribe from this list: send the line "unsubscribe linux-admin" in
>the body of a message to majordomo@vger.kernel.org
>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>  
>

  reply	other threads:[~2005-02-05 20:22 UTC|newest]

Thread overview: 28+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-02-03 12:30 transparent proxy Luca Ferrari
2005-02-03 15:58 ` Jens Knoell
2005-02-05 18:22   ` Andreas Unterkircher
2005-02-05 19:42     ` Adrian C.
2005-02-05 20:22       ` Andreas Unterkircher [this message]
2005-02-05 20:47         ` Andreas Unterkircher
  -- strict thread matches above, loose matches on Subject: below --
2010-03-09 23:44 Marco Schuth
2010-03-10  0:23 ` Amos Jeffries
2010-03-13  8:21   ` Mart Frauenlob
2010-03-13 10:05     ` /dev/rob0
2010-03-13 12:08       ` Mart Frauenlob
2010-03-13 12:11         ` Mart Frauenlob
2010-03-13 16:41         ` /dev/rob0
2010-03-13 21:58           ` Mart Frauenlob
2004-03-17 12:33 Fredrik Emil Jensen
2004-03-17 14:21 ` David Cannings
2004-03-15  9:19 Fredrik Emil Jensen
2004-03-16  1:57 ` Alexander Samad
2004-03-16  8:44 ` Antony Stone
2004-02-27 19:19 Guillermo Chui Lau
2004-02-27  8:48 Tomasz Macioszek
2004-02-27  9:18 ` Jeroen Vriesman
2004-02-27  9:27   ` Antony Stone
2004-02-27 10:25     ` Jeroen Vriesman
2004-02-27 11:50 ` John A. Sullivan III
2004-02-27 17:00 ` Daniel F. Chief Security Engineer -
2003-09-10 21:19 Transparent Proxy Kilson Arruda
2002-11-25 13:04 Cyril COUPEL

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=42052AF4.3050809@netshadow.at \
    --to=unki@netshadow.at \
    --cc=drupix@gmail.com \
    --cc=fluca1978@infinito.it \
    --cc=linux-admin@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.