IPtables Transparent Proxy

[zebulebu]

Originally Posted by jackd

Ill give you a little background info for a better idea of my setup
The machine is running Ubuntu Server 7.10 squid version is 2.6, everything on my squid setup should be working fine if i set the proxy manually in the clients then everything is fine even https works as it should, but oviously i dont want to setup the clients manually i'd just like it to be transparent.

Heres the nat iptable on my /etc/iptables.up.rules

*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -j MASQUERADE
#-A PREROUTING -p tcp -m tcp -i eth1 ! --dport 22 -j REDIRECT --to-ports 3128
#-A PREROUTING -p tcp -m tcp -i eth1 ! --dport 443 -j REDIRECT --to-ports 3128
#-A PREROUTING -p tcp -m tcp -i eth1 ! --dport 10000 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp -i eth1 --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -p tcp -m tcp -j ACCEPT

You can see the rules that i tried commented out. I cant fit my whole squid config file on here so is accessable via my webserver here

Jack - forgive me for stating the obvious, but are the lines for ports 22,443 and 10000 still commented out in your live config?

[jackd]

They are currently because they arent working, ive just commented them out so i dont have to recreate them all again if i need to change something. Sorry about that i was going to put it in my last post but must of forgot sorry. I needed to comment them out because some people still need to use the internet

Jack