Re: Forwarding web traffic

From: Clifton Royston <[email protected]>
Date: Mon, 6 Mar 2000 09:57:40 -1000

On Mon, Mar 06, 2000 at 10:58:45AM -0600, Brent Herring wrote:
> http://www.squid-cache.org/Doc/FAQ/FAQ-17.html
>
> where it says "How can I make my users' browsers use my cache without
> configuring the browsers for proxying?" I used IPchains to forward
> all the web traffic coming into port 80 to port 3128.
>
> ipchains -I input -p tcp -s 192.168.0.0/16 -d 0/0 80 -j REDIRECT 3128
>
>
> After doing this it appears that Squid sees the traffic, but the
> access log is full of entries like
>
> 192.168.2.151 NONE/400 1122 GET
>
> which according to the documentation "NONE" means that "Squid does
> not forward the request at all".
>
> The store.log file has entries like
>
> RELEASE FFFFFFFF 400 -1 -1 -1 unknown -1/1021
...
> Am I missing something basic or am I barking up the wrong tree
> altogether?

Did you use all of the Squid options which are required to make
transparent proxy work? You need *all* of these in your squid.conf:

 httpd_accel_host virtual
 httpd_accel_port 80
 httpd_accel_with_proxy on
 httpd_accel_uses_host_header on

These are also compatible with a browser-configured proxy - which is
convenient for testing - but they are required for transparent proxy.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr@lava.net
      The named which can be named is not the Eternal named.
Received on Mon Mar 06 2000 - 15:56:06 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:51:56 MST