<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>[Replying on correct topic (sorry)]</p>
<p><br>
</p>
<p></p>
<div class="x__rp_N4 x_ms-font-weight-regular x_ms-font-color-neutralDark x_rpHighlightAllClass x_rpHighlightBodyClass" id="x_Item.MessageUniqueBody" tabindex="0" style="font-family:"wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif,serif,"EmojiFont"">
<div>
<div>
<div dir="ltr">
<div id="x_x_divtagdefaultwrapper"><font size="3" color="black" face="Calibri,Arial,Helvetica,sans-serif" style="font-family:Calibri,Arial,Helvetica,sans-serif,serif,"EmojiFont""><span id="x_x_divtagdefaultwrapper" style="font-size:12pt">
<div style="margin-top:0; margin-bottom:0">I found a windows ipfw version here <a href="http://wipfw.sourceforge.net/" target="_blank" rel="noopener noreferrer" id="LPlnk111020">
<span id="LPlnk111020">http://wipfw.sourceforge.net/</span></a> and here <a href="https://github.com/luigirizzo/dummynet" target="_blank" rel="noopener noreferrer" id="LPlnk569448">
<span id="LPlnk569448">https://github.com/luigirizzo/dummynet</span></a></div>
<div style="margin-top:0; margin-bottom:0"><br>
</div>
<div style="margin-top:0; margin-bottom:0">So, if I install it on Windows, and do that
<a href="http://wiki.squid-cache.org/ConfigExamples/Intercept/Ipfw" target="_blank" rel="noopener noreferrer" id="LPlnk623585">
<span id="LPlnk623585">http://wiki.squid-cache.org/ConfigExamples/Intercept/Ipfw</span></a> should it work?</div>
<div style="margin-top:0; margin-bottom:0"><br>
</div>
<div style="margin-top:0; margin-bottom:0">Just to be clear, I don't want Windows doing the job of redirecting packets from 80 to 3129. I use iptables on dd-wrt for that (wifi guest only).</div>
<div style="margin-top:0; margin-bottom:0"><br>
</div>
<div style="margin-top:0; margin-bottom:0">The problem is that when I configure squid as "http_port 3129 intercept" instead of "http_port 3129" it show me these errors:</div>
<div style="margin-top:0; margin-bottom:0"><br>
</div>
<div style="margin-top:0; margin-bottom:0"> </div>
<div>2017/05/06 17:43:08 kid1| ERROR: NAT/TPROXY lookup failed to locate original IPs on local=10.0.0.1:3129 remote=192.168.11.236:57141 FD 9 flags=1<br>
2017/05/06 17:43:08 kid1| WARNING: transparent proxying not supported</div>
</span></font></div>
</div>
</div>
</div>
</div>
<br>
<p></p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>De:</b> squid-users <squid-users-bounces@lists.squid-cache.org> em nome de Amos Jeffries <squid3@treenet.co.nz><br>
<b>Enviado:</b> domingo, 7 de maio de 2017 19:07:08<br>
<b>Para:</b> squid-users@lists.squid-cache.org<br>
<b>Assunto:</b> Re: [squid-users] 'Intercept' option on Windows</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">On 08/05/17 04:05, Tobias Tromm wrote:<br>
><br>
> I don't know what exactly you need to make it work.<br>
><br>
><br>
> I found these APIs <br>
> (<a href=""></a>https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366278.aspx
<br>
> , <br>
> <a href="https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366187(v=vs.85).aspx">
https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366187(v=vs.85).aspx</a>
<br>
> <<a href="https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366187%28v=vs.85%29.aspx">https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366187%28v=vs.85%29.aspx</a>>),
<br>
> can they help?<br>
><br>
><br>
> If not, can you explain to me what kind of access is necessary? Maybe <br>
> I can find someone on the internet that can do something about, maybe <br>
> create one, I don't know...<br>
><br>
<br>
Those are API for setting up NAT rules.<br>
<br>
What Squid needs is a way to fetch the dest-IP which was in the TCP <br>
packet before NAT altered it.<br>
<br>
Amos<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
squid-users@lists.squid-cache.org<br>
<a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
</div>
</span></font>
</body>
</html>