Re: [squid-users] Transp. Proxy, Browser and VPN Client on the same box?

Henrik Nordstrom schrieb:
>
> Should work if the traffic is routed there for a start.. See the Squid
> FAQ for details on how Squid needs to be configured.
>
> You can only intercept traffic routed to the box.

That's the problem. IMHO, it can't work with the browser and the proxy running
on the same machine as a transparent proxy. Now I do it with iptables. The
line:

iptables -A OUTPUT -d ! 127.0.0.1 -m owner --uid-owner 500 -j REJECT

will force the use Squid on the loopback interface, because all packets in the
OUTPUT chain with the destination 0/0, except the localhost, and all packets
generated by a process running with uid=500 will be rejected. Squid is no
longer in a "transparent" mode, but this doesn't matter.

Dirk

-- 
Dirk-Michael Wagner *** Wagner.Dirk-Michael@web.de
Open Minds. Open Sources. Open Future. - Linux!