Re: Inter-Squid firewalling

Sys Admin/Curtis Hays II <hays@oldcolo.com> writes:
> Would it be possible to use ipfwadm an redirect the packets ...i.e. client
> is setup to use port 3128 on the squid server, then ipfwadm takes the
> output of squid and redirects it to port 9119 on the firewall? The
> firewall would then see the proxy server trying to access a site outside
> the intranet, send back a login window to the proxy server, which would
> foreward that window to the client?

If you mean an HTTP password challenge, then yes, Squid handles that, but
the page then fetched will NOT be cached by Squid since it's "private"
data (same result as if you told Squid to use the firewall directly and
skipped ipfwadm). If you're referring to some other challenge protocol,
then it'll likely fail completely.

-- 
Anthony DeBoer <adb@geac.com>                    #include <std.disclaimer>