[squid-users] 'Intercept' option on Windows

[Tobias Tromm]

[Replying on correct topic (sorry)]


I found a windows ipfw version here http://wipfw.sourceforge.net/ and here https://github.com/luigirizzo/dummynet

So, if I install it on Windows, and do that http://wiki.squid-cache.org/ConfigExamples/Intercept/Ipfw should it work?

Just to be clear, I don't want Windows doing the job of redirecting packets from 80 to 3129. I use iptables on dd-wrt for that (wifi guest only).

The problem is that when I configure squid as "http_port 3129 intercept" instead of "http_port 3129" it show me these errors:


2017/05/06 17:43:08 kid1| ERROR: NAT/TPROXY lookup failed to locate original IPs on local=10.0.0.1:3129 remote=192.168.11.236:57141 FD 9 flags=1
2017/05/06 17:43:08 kid1| WARNING: transparent proxying not supported


________________________________
De: squid-users <squid-users-bounces at lists.squid-cache.org> em nome de Amos Jeffries <squid3 at treenet.co.nz>
Enviado: domingo, 7 de maio de 2017 19:07:08
Para: squid-users at lists.squid-cache.org
Assunto: Re: [squid-users] 'Intercept' option on Windows

On 08/05/17 04:05, Tobias Tromm wrote:
>
> I don't know what exactly you need to make it work.
>
>
> I found these APIs
> (https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366278.aspx
> ,
> https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366187(v=vs.85).aspx
> <https://msdn.microsoft.com/pt-br/library/windows/desktop/aa366187%28v=vs.85%29.aspx>),
> can they help?
>
>
> If not, can you explain to me what kind of access is necessary? Maybe
> I can find someone on the internet that can do something about, maybe
> create one, I don't know...
>

Those are API for setting up NAT rules.

What Squid needs is a way to fetch the dest-IP which was in the TCP
packet before NAT altered it.

Amos

_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170507/5362d0a0/attachment.html>