netfilter.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* Transparent bridge and proxy - with only lo?
@ 2009-03-26 18:54 bldrnorth
  0 siblings, 0 replies; 3+ messages in thread
From: bldrnorth @ 2009-03-26 18:54 UTC (permalink / raw)
  To: netfilter

While there is no shortage of documentation on setting up a
transparent bridge with Squid proxy, I have only seen examples that
assign an IP address to the bridge interface.  In my circumstances,
the bridge is between the ISP's bridge and our own router, such as:
(ISP Bridge) <--->(Our Bridge)<--->(Our router).  Typical I'm sure,
but Our router is assigned only 1 IP address so I really don't have an
IP address to assign the bridge interface.  Here's how I'm setup:

brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
ip link set br0 up
# Normally, would assign an IP address to br0 and a default route

I was thinking I should be able to re-direct to the localhost
interface 127.0.0.1, or perhaps assign an address like 127.0.0.2 to
br0, but then could not figure out the appropriate iptables and route
command.  I'm sure I could assign br0 a private ip address, but then
wouldn't be sure how to tell it to route.  Here's all I have so far...

ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 \
        --ip-destination-port 80 -j redirect --redirect-target ACCEPT

If I've completely missed where this has been addressed somewhere else
I'd appreciate a link or some advice here.

Thanks!

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Transparent bridge and proxy - with only lo?
@ 2009-04-06 19:49 bldrnorth
  2009-04-14 15:22 ` Gáspár Lajos
  0 siblings, 1 reply; 3+ messages in thread
From: bldrnorth @ 2009-04-06 19:49 UTC (permalink / raw)
  To: netfilter

Hi:

While there is no shortage of documentation on setting up a
transparent bridge with Squid proxy, I have only seen examples that
assign an IP address to the bridge interface.  In my circumstances,
the bridge is between the ISP's bridge and our own router, such as:
(ISP Bridge) <--->(Our Bridge)<--->(Our router).  Typical I'm sure,
but Our router is assigned only 1 IP address so I really don't have an
IP address to assign the bridge interface.  Here's how I'm setup:

brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
ip link set br0 up
# Normally, would assign an IP address to br0 and a default route

I was thinking I should be able to re-direct to the localhost
interface 127.0.0.1, or perhaps assign an address like 127.0.0.2 to
br0, but then could not figure out the appropriate iptables and route
command.  I'm sure I could assign br0 a private ip address, but then
wouldn't be sure how to tell it to route.  Here's all I have so far...

ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 \
       --ip-destination-port 80 -j redirect --redirect-target ACCEPT

If I've completely missed where this has been addressed somewhere else
I'd appreciate a link or some advice here.

Thanks!

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Transparent bridge and proxy - with only lo?
  2009-04-06 19:49 Transparent bridge and proxy - with only lo? bldrnorth
@ 2009-04-14 15:22 ` Gáspár Lajos
  0 siblings, 0 replies; 3+ messages in thread
From: Gáspár Lajos @ 2009-04-14 15:22 UTC (permalink / raw)
  To: bldrnorth@gmail.com; +Cc: netfilter

Hi!

bldrnorth@gmail.com írta:
> Hi:
>
> While there is no shortage of documentation on setting up a
> transparent bridge with Squid proxy, I have only seen examples that
> assign an IP address to the bridge interface.  In my circumstances,
> the bridge is between the ISP's bridge and our own router, such as:
> (ISP Bridge) <--->(Our Bridge)<--->(Our router).  Typical I'm sure,
> but Our router is assigned only 1 IP address so I really don't have an
> IP address to assign the bridge interface.  Here's how I'm setup:
>
>   
What about a private IP on the brigde?

> # Normally, would assign an IP address to br0 and a default route
>   
(nod)
> I was thinking I should be able to re-direct to the localhost
> interface 127.0.0.1, or perhaps assign an address like 127.0.0.2 to
> br0, but then could not figure out the appropriate iptables and route
> command.  I'm sure I could assign br0 a private ip address, but then
> wouldn't be sure how to tell it to route.  Here's all I have so far...
>
>   
127.0.0.1/8 is not this kind of playground :D

Swifty


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2009-04-14 15:22 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-04-06 19:49 Transparent bridge and proxy - with only lo? bldrnorth
2009-04-14 15:22 ` Gáspár Lajos
  -- strict thread matches above, loose matches on Subject: below --
2009-03-26 18:54 bldrnorth

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).