From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ray Leach Subject: Re: Transparent web proxy Date: Tue, 12 Jun 2007 15:14:18 +0200 Message-ID: <200706121514.18368.raymondl@knowledgefactory.co.za> References: <200706121338.41595.raymondl@knowledgefactory.co.za> <2A64E4F2-D73E-4E91-95EC-A80FCE6C33D3@ianmoyce.co.uk> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <2A64E4F2-D73E-4E91-95EC-A80FCE6C33D3@ianmoyce.co.uk> Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: Ian Moyce Cc: netfilter@lists.netfilter.org On Tuesday 12 June 2007 13:44:07 Ian Moyce wrote: > On 12 Jun 2007, at 12:38, Ray Leach wrote: > > On Tuesday 12 June 2007 13:13:08 Ian Moyce wrote: > >> Hello, > >> > >> I am trying to set up transparent web proxy server, but from the > >> examples I have found on the web, I can not make it work. > >> > >> I am trying: > >> > >> iptables -A FORWARD -i vnet0 -o tun0 -p tcp -m state --state > >> ESTABLISHED,RELATED -j ACCEPT > >> iptables -t nat -A PREROUTING -i venet0 -p tcp --dport 80 -j REDIRECT > >> --to 8888 > >> > >> Where tun0 is the VPN port, vnet0 (its actually vnet0:0) is the > >> network interface. > >> > >> Squid is listening on localhost:8888 > >> > >> I get an error message when I run these 2 lines: > >> > >> # iptables -t nat -A PREROUTING -i venet0 -p tcp --dport 80 -j > >> REDIRECT --to 8888 > >> iptables: No chain/target/match by that name > >> > >> > >> Help!!! > >> > >> Thanks > >> > >> Ian Moyce > > > > Seems like you're missing NAT support in your kernel maybe? > > Hi, > > NAT seems to be working okay as I am using it as a VPN server...! Specifically the REDIRECT target needs to be compiled into the kernel or full nat support. ------------------------------------------------------------------------------------------ This e-mail was checked by the e-Sweeper Service. For more information visit our website, Clearswift Corporation e-Sweeper : http://www.mimesweeper.com/products/esweeper/ ------------------------------------------------------------------------------------------