Re: Transparent web proxy

[Ray Leach <raymondl@knowledgefactory.co.za>]

On Tuesday 12 June 2007 13:44:07 Ian Moyce wrote:
> On 12 Jun 2007, at 12:38, Ray Leach wrote:
> > On Tuesday 12 June 2007 13:13:08 Ian Moyce wrote:
> >> Hello,
> >>
> >> I am trying to set up transparent web proxy server, but from the
> >> examples I have found on the web, I can not make it work.
> >>
> >> I am trying:
> >>
> >> iptables -A FORWARD -i vnet0 -o tun0 -p tcp -m state --state
> >> ESTABLISHED,RELATED -j ACCEPT
> >> iptables -t nat -A PREROUTING -i venet0 -p tcp --dport 80 -j REDIRECT
> >> --to 8888
> >>
> >> Where tun0 is the VPN port, vnet0 (its actually vnet0:0) is the
> >> network interface.
> >>
> >> Squid is listening on localhost:8888
> >>
> >> I get an error message when I run these 2 lines:
> >>
> >> # iptables -t nat -A PREROUTING -i venet0 -p tcp --dport 80 -j
> >> REDIRECT --to 8888
> >> iptables: No chain/target/match by that name
> >>
> >>
> >> Help!!!
> >>
> >> Thanks
> >>
> >> Ian Moyce
> >
> > Seems like you're missing NAT support in your kernel maybe?
>
> Hi,
>
> NAT seems to be working okay as I am using it as a VPN server...!

Specifically the REDIRECT target needs to be compiled into the kernel or full 
nat support.



------------------------------------------------------------------------------------------
This e-mail was checked by the e-Sweeper Service.
For more information visit our website, Clearswift Corporation e-Sweeper :
http://www.mimesweeper.com/products/esweeper/
------------------------------------------------------------------------------------------