[squid-users] Transparent and non Transparent at the same time

Antony Stone Antony.Stone at squid.open.source.it
Thu Oct 27 18:54:32 UTC 2016


On Thursday 27 October 2016 at 19:51:22, Yuri Voinov wrote:

> You absolutely sure, Eliezier? :)

Yes - you do not use DNAT.

You do use REDIRECT on the machine Squid is running on.


Antony.

> 27.10.2016 23:46, Eliezer Croitoru пишет:
> > You need routing policy not DNAT.
> > 
> > Eliezer
> > 
> > ----
> > Eliezer Croitoru
> > Linux System Administrator
> > Mobile: +972-5-28704261
> > Email: eliezer at ngtech.co.il
> > 
> > 
> > -----Original Message-----
> > From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org]
> 
> On Behalf Of erdosain9
> 
> > Sent: Thursday, October 27, 2016 19:08
> > To: squid-users at lists.squid-cache.org
> > Subject: Re: [squid-users] Transparent and non Transparent at the same
> 
> time
> 
> > Ok... but i have this problem
> > 
> >  ERROR: NAT/TPROXY lookup failed to locate original IPs on
> > 
> > local=192.168.1.15:3130 remote=192.168.1.1:52090 FD 14 flags=33
> > 
> > ...
> > I put some dstnat in Mikrotik (192.168.1.1)
> > 
> > 
> > ip firewall nat add chain=dstnat src-add=192.168.1.121 protocol=tcp
> > dst-port=80  action=dst-nat
> > to-addresses=192.168.1.20 to-ports=3129
> > 
> > ERROR: NAT/TPROXY lookup failed to locate original IPs on
> > local=192.168.1.20:3129 remote=192.168.1.1:52153 FD 14 flags=33
> > 2016/10/27 14:01:43 kid1| ERROR: NF getsockopt(ORIGINAL_DST) failed on
> > local=192.168.1.215:3129 remote=192.168.1.1:52154 FD 14 flags=33: (92)
> 
> Protocol not available
> 
> > I dont have iptables or firewalld... im using Centos... is necessary
> 
> enable firewalld or iptables???
> 
> > im using the PC (192.168.1.121 for test) Thanks
> 
> http://squid-web-proxy-cache.1019090.n4.nabble.com/Transparent-and-non-Tran
> sparent-at-the-same-time-tp4680309p4680330.html
> 
> > Sent from the Squid - Users mailing list archive at Nabble.com.
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users
> > 
> > _______________________________________________
> > squid-users mailing list
> > squid-users at lists.squid-cache.org
> > http://lists.squid-cache.org/listinfo/squid-users

-- 
#define SIX 1+5
#define NINE 8+1

int main() {
    printf("%d\n", SIX * NINE);
}
	- thanks to ECB for bringing this to my attention

                                                   Please reply to the list;
                                                         please *don't* CC me.


More information about the squid-users mailing list