RE: [squid-users] Transparent Proxy on RH not working after reboo t

Henrik,

I followed the steps and have attached the output from a diff on working and
bad. There doesn't appear to be anything useful in this output that would
indicate what the problem is. Can you see anything? I have this problem on
two completely seperate systems (home and work) and I can duplicate it all
day long.

1c1,10
< # Generated by iptables-save v1.2.6a on Tue Jan 28 07:30:03 2003

---
> # Generated by iptables-save v1.2.6a on Tue Jan 28 07:45:22 2003
> *mangle
> :PREROUTING ACCEPT [225:24853]
> :INPUT ACCEPT [7478649:2531734271]
> :FORWARD ACCEPT [2052975:1034876784]
> :OUTPUT ACCEPT [267:20689]
> :POSTROUTING ACCEPT [9724261:3463492400]
> COMMIT
> # Completed on Tue Jan 28 07:45:22 2003
> # Generated by iptables-save v1.2.6a on Tue Jan 28 07:45:22 2003
3,5c12,14
< :PREROUTING ACCEPT [1019:94481]
< :POSTROUTING ACCEPT [699:41916]
< :OUTPUT ACCEPT [2278:153933]
---
> :PREROUTING ACCEPT [22:2674]
> :POSTROUTING ACCEPT [4:460]
> :OUTPUT ACCEPT [43:3522]
10,20c19,20
< # Completed on Tue Jan 28 07:30:03 2003
< # Generated by iptables-save v1.2.6a on Tue Jan 28 07:30:03 2003
< *mangle
< :PREROUTING ACCEPT [210614:179175463]
< :INPUT ACCEPT [7686137:2710497247]
< :FORWARD ACCEPT [2055631:1035257558]
< :OUTPUT ACCEPT [215674:168830735]
< :POSTROUTING ACCEPT [9942324:3632683220]
< COMMIT
< # Completed on Tue Jan 28 07:30:03 2003
< # Generated by iptables-save v1.2.6a on Tue Jan 28 07:30:03 2003
---
> # Completed on Tue Jan 28 07:45:22 2003
> # Generated by iptables-save v1.2.6a on Tue Jan 28 07:45:22 2003
22c22
< :INPUT DROP [262:8626]
---
> :INPUT DROP [6:192]
76c76
< # Completed on Tue Jan 28 07:30:03 2003
---
> # Completed on Tue Jan 28 07:45:22 2003
Any help would be greatly appreciated.
Thanks
Ryan
-----Original Message-----
From: Henrik Nordstrom [mailto:hno@squid-cache.org]
Sent: Tuesday, January 28, 2003 1:10 AM
To: Ryan Delany (TS-US); 'squid-users@squid-cache.org'
Subject: Re: [squid-users] Transparent Proxy on RH not working after
reboot
Try this:
1. iptables-save > working
2. reboot
3. iptables-save > bad
4. disable the transparent proxy and re-enable it.
Then compare "working" and "bad" to see if there is any difference. If 
there is a difference, try to figure out from where this difference 
arised.
Regards
Henrik
On Monday 27 January 2003 23.48, Ryan Delany (TS-US) wrote:
> I have setup a transparent proxy using iptables to redirect to port
> 3128 and then to port 8080 for a virus scanning program.  The
> transparent proxy redirection is called during startup via the
> iptables script at  the very end.
>
> Whenever I reboot the machine, I lose internet connectivity until I
> disable the transparent proxy and re-enable it.
>
> Anyone else have this problem?  More importantly does anyone have
> any suggestions on how to resolve the problem?  Currently IPtables
> is called before squid, do I need to change that so that squid is
> already started before iptables tries to redirect to it?
>
> Thanks
>
> Ryan