Re: Transparent proxying using Solaris 2.6

Jose Carlos Jaramillo B. wrote:
>
> I need to activate the ip-filter in solaris 2.6
> , so that work in the squid as
> transparent proxy . But I have not achieved to make it
> someone can help me.

To do this you currently need

1. Some way to get the packets routed to the proxy server
   a) route map
   b) use the proxy as router
   c) ???
2. ip-filter
3. squid (any version)
4. transproxy (ftp://ftp.nlc.net.au/pub/linux/www/)

Example route maps are in the Squid FAQ.

Instructions for setting up IP filter is available on the IP-filter www
pages.

Transproxy is needed since the IP-filter specific parts of the code is
not in Squid (yet), so Squid can't determine the true destination
address on "old" (pure HTTP 1.0) requests.

When Squid is used with Transproxy, it can be configured as a standard
proxy. All the transparent proxying specific parts is done in
transproxy.

If you want then you can move the IP-Filter code from transproxy into
Squid, and configure Squid in "accelerate all" mode. Then squid.conf
settings becomes:

httpd_accel virtual 80
httpd_accel_uses_host_header on
or for 1.2:
httpd_accel_host virtual
httpd_accel_uses_host_header on

Se my previous message on where the IP-Filter code should be inserted
into Squid.

If your platform has native support for transparent proxying (Linux and
resent FreeBSD-current?) then the requirements drop down to packet
routing and a Squid configured in "accelerate all" mode.

---
Henrik Nordström
Sparetime Squid Hacker