[squid-users] Squid in transparent

[Yuri Voinov]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://wiki.squid-cache.org/ConfigExamples/Intercept

26.02.15 23:12, Monah Baki пишет:
> Hi all,
> 
> I have client who has his Policy Based Routing as:
> 
> interface GigabitEthernet0/0/1.1 (route policy on the LAN
> interface)
> 
> ip policy route-map CFLOW
> 
> 
> 
> 
> 
> ip access-list extended REDIRECT (Redirect of my IP www)
> 
> deny   tcp host 10.0.0.24 any eq www
> 
> permit tcp host 10.0.0.23 any eq www
> 
> 
> 
> route-map CFLOW permit 10  (route map)
> 
> match ip address REDIRECT set ip next-hop 10.0.0.24
> 
> 
> 
> The 10.0.0.24 is my FreeBSD 10.1 running squid 3.5, with one
> interface, 10.0.0.23 is his laptop. The IP address of the Cisco is
> 10.0.0.9
> 
> I configured squid as: ./configure --prefix=/cache/squid
> --enable-follow-x-forwarded-for --with-large-files --enable-ssl
> --disable-ipv6 --enable-esi --enable-kill-parent-hack --enable-snmp
> --with-pthreads --with-filedescriptors=65535
> --enable-cachemgr-hostname=hostname 
> --enable-storeio=ufs,aufs,diskd,rock --enable-ipfw-transparent 
> --enable-pf-transparent
> 
> My squid.conf has the following; # Squid normally listens to port
> 3128 http_port 3128 intercept http_port 80 intercept snmp_port
> 3401
> 
> 
> If I remove the intercept and from a client browser points to the
> squid, it works. If I add the intercept, it does not work, I do not
> see any logs in my access.log file.
> 
> 
> Any help will be highly appreciated
> 
> 
> Thanks Monah
> 
> 
> 
> _______________________________________________ squid-users mailing
> list squid-users at lists.squid-cache.org 
> http://lists.squid-cache.org/listinfo/squid-users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJU71SFAAoJENNXIZxhPexGRrYH/3aN8FnRdm9kbM1867C3SKeO
1iA1ZvEa7QuwLox1VvigjGS22cX5qqt/uodNzDI/WPPDj8C56PWbCoCWlHy2mpJE
xXYwNV+yYSPb4TYHooUPyxqH8G0Ghod3TAyOGnGLSSL3Hf3KPP5M3VWjsxJNI7ox
+TDaAAgsWzcKblJHGT3wTOGAT6Kzqm0MAaQyoacI+bTfPUhaLrm5VyV6kYAIQQCf
41mfMLvR8RG9TE/oCIbCzciZan5JoKIcTpqrpnU7K16qoEmZXDmsbJM5cDpXM7dG
6RG8EW9auRyg8xc3XjpR7ZpXVkKipqmieRqGMyQUnKsobeGv2jI0LZqkEPDEX9M=
=EwCL
-----END PGP SIGNATURE-----