[squid-users] OpenBSD pf and Squid running on Linux.

From: Steve Keate <[email protected]>
Date: Mon, 17 Feb 2003 15:46:26 +1300

I am having a problem using OpenBSD as a redirector for a Linux based
transparent proxy, can anyone tell me what I'm doing wrong?

I'm trying to use the NAT in OpenBSD's pf on a bridging firewall to
pass requests to a Linux box running squid that is configured as a
transparent proxy using this line in Nat.conf...

rdr proto tcp from ! 192.168.250.198 to any port 80 -> 192.168.250.198
port 8080

It seems that PF doesn't pass the packets on to squid in a way it can
understand, and it thinks that all requests are broken, access.log says
this when it receives a request:

1045431507.575 21 192.168.250.240 TCP_HIT/200 4233 GET
http://slashdot.org/s
lashdot.xml - NONE/- text/xml

Perhaps this is the reason for the "--enable-pf-transparent" option in
the configure script?

If I compile and run the same version of squid on the OpenBSD
firewall's 2Gb HD, it works, but transplanting the configuration onto
the Linux box fails like this. Can anyone shed some light on the
situation?
Received on Sun Feb 16 2003 - 19:46:37 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:13:25 MST