From: Antony Stone <Antony@Soft-Solutions.co.uk>
To: Netfilter-List <netfilter@lists.netfilter.org>
Subject: Re: Transparent proxy question
Date: Mon, 15 Mar 2004 09:07:28 +0000 [thread overview]
Message-ID: <200403150907.28211.Antony@Soft-Solutions.co.uk> (raw)
In-Reply-To: <40556EE6.6040809@stupar.homelinux.net>
On Monday 15 March 2004 8:52 am, Sasa Stupar wrote:
> Hi!
>
> I have configure a transparent proxy and it is working fine. But now all
> requests to squid came from my nat box and I can't use my MAC acl
> anymore. Is there any option to provide to squid who is connecting and
> not the nat box which is used for transparency?
If you really mean MAC address based ACL, then no, you cannot use this to
identify clients any more, because all the packets will be coming from the
netfilter machine, so that is the only MAC address your proxy will know
about.
If you actually mean source IP address based ACL, then you need to check your
SNAT rule in the POSTROUTING chain of netfilter - make sure it is only
applied to your external interface, not the interface where your proxy server
is connected.
If you have a more complicated network setup than I am assuming, please supply
a description or a diagram.
Regards,
Antony.
--
There's no such thing as bad weather - only the wrong clothes.
- Billy Connolly
Please reply to the list;
please don't CC me.
next prev parent reply other threads:[~2004-03-15 9:07 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-03-15 8:52 Transparent proxy question Sasa Stupar
2004-03-15 9:07 ` Antony Stone [this message]
2004-03-15 9:38 ` Sasa Stupar
2004-03-15 10:36 ` Antony Stone
2004-03-15 10:51 ` Sasa Stupar
2004-03-15 11:02 ` Antony Stone
[not found] ` <405589BC.70703@stupar.homelinux.net>
2004-03-15 10:57 ` Antony Stone
2004-03-15 11:07 ` Sasa Stupar
2004-03-15 11:24 ` Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200403150907.28211.Antony@Soft-Solutions.co.uk \
--to=antony@soft-solutions.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox