Hi,
For life of it I am still unable to get transparent proxy working.
Now I am trying it on a single standalone Linux Mdk 9.1 box with
dial-up connection to net with squid.
Then I removed the proxy tab from links and tried surfing the net hoping
that access_log will be filled no matter if proxy is enabled or not, but
I can still browse the sites and access_log is not filled/logged at all.
Only when I enable proxy settings in my browser it is getting accessed.
Can someone help in this?
My squid configuration details are given below.
# squid -v
Squid Cache: Version 2.5.STABLE1-20030121
configure options: i586-mandrake-linux-gnu --prefix=/usr
--exec-prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin
--sysconfdir=/etc/squid --datadir=/usr/share --includedir=/usr/include
--libdir=/usr/lib --libexecdir=/usr/lib/squid --localstatedir=/var
--sharedstatedir=/usr/com --mandir=/usr/share/man
--infodir=/usr/share/info --enable-poll --enable-snmp
--enable-removal-policies=heap,lru --enable-useragent-log --enable-carp
--enable-async-io --enable-storeio=aufs,coss,diskd,ufs,null
--enable-htcp --enable-delay-pools --enable-linux-netfilter
--with-pthreads --enable-ssl --enable-auth=basic,digest,ntlm
--enable-basic-auth-helpers=winbind,multi-domain-NTLM,getpwnam,YP,SMB,SASL,PAM,NCSA,MSNT,LDAP
--enable-ntlm-auth-helpers=SMB,fakeauth,no_check,winbind
--enable-digest-auth-helpers=password
I have in my squid.conf,
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
iptables is used like this,
# iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT
--to-port 3128
# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
REDIRECT tcp -- anywhere anywhere tcp dpt:http
redir ports 3128
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
With warm regards,
-Payal
-- "Visit GNU/Linux Success Stories" http://payal.staticky.com Guest-Book Section Updated.Received on Wed Jul 30 2003 - 01:09:32 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:18:20 MST