From: "Tomasz Macioszek" <tomekm@cea.pl>
To: Netfilter <netfilter@lists.netfilter.org>
Subject: transparent proxy
Date: Fri, 27 Feb 2004 09:48:39 +0100 [thread overview]
Message-ID: <003901c3fd0e$88a3c6f0$2a245cc2@cea05> (raw)
Hello!
I have a Linux server acting as a gateway between internal network and
internet. The iptables rule set have been working good for long time.
I have configured squid on this server. When I have set internal network
client to use directly proxy server it has worked properly. But when I have
set iptable to redirect all http traffic to squid port (3128) it didn't
work (transparent proxy).
This is my iptable rule:
iptables -t nat -A PREROUTING -p TCP --dport 80 -j REDIRECT --to-port 3128
I think that all options in my kernel are set properly.
I don't know why it doesn't work
I set tcpdump to listen on 3128 port and when client tried to connect to web
server on port 3128 showed only first IP package of this connection and
connections failed.
Could you send me a solution for this problem?
Best regards
Tomek
next reply other threads:[~2004-02-27 8:48 UTC|newest]
Thread overview: 22+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-27 8:48 Tomasz Macioszek [this message]
2004-02-27 9:18 ` transparent proxy Jeroen Vriesman
2004-02-27 9:27 ` Antony Stone
2004-02-27 10:25 ` Jeroen Vriesman
2004-02-27 11:50 ` John A. Sullivan III
2004-02-27 17:00 ` Daniel F. Chief Security Engineer -
-- strict thread matches above, loose matches on Subject: below --
2010-03-09 23:44 Marco Schuth
2010-03-10 0:23 ` Amos Jeffries
2010-03-13 8:21 ` Mart Frauenlob
2010-03-13 10:05 ` /dev/rob0
2010-03-13 12:08 ` Mart Frauenlob
2010-03-13 12:11 ` Mart Frauenlob
2010-03-13 16:41 ` /dev/rob0
2010-03-13 21:58 ` Mart Frauenlob
2004-03-17 12:33 Fredrik Emil Jensen
2004-03-17 14:21 ` David Cannings
2004-03-15 9:19 Fredrik Emil Jensen
2004-03-16 1:57 ` Alexander Samad
2004-03-16 8:44 ` Antony Stone
2004-02-27 19:19 Guillermo Chui Lau
2003-09-10 21:19 Transparent Proxy Kilson Arruda
2002-11-25 13:04 Cyril COUPEL
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='003901c3fd0e$88a3c6f0$2a245cc2@cea05' \
--to=tomekm@cea.pl \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox