Re: transparent proxy or not?

Hi there,

I looked into the FAQ and I pieced up something that met my requirements
which were to transparently forward all http requests off to another proxy
server. I also found a rule that didn't "recache" any items dl'd (my
preference).

Here are the relevant squid options I used.

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

cache_peer proxy.dsl.ca parent 3128 0 no-query proxy-only
prefer_direct off
no_cache deny all

----- Original Message -----
From: "List Server Account" <lists@bagel.gen.nz>
To: "William Wong" <willwong@anime.ca>
Cc: <squid-users@ircache.net>
Sent: Wednesday, June 07, 2000 7:09 AM
Subject: Re: transparent proxy or not?

>
> Why not simply run transproxy, and let it translate the requests
> for you. It is easy, and works with any kernel that can handle
> simple redirection. I've done it on 2.0.x, 2.2.x and 2.3.99
>
> Then you simply use standard proxy configuration.
>
>
> Cheers,
> David
>
>
> >
> > I've looked through the archives and I haven't seen anything similar to
my
> > situation so here I am :)
> >
> > My ISP provides a squid proxy service on the standard 3128 port.
> >
> > I am currently behind an ipfilter/ipnat firewall. What I'd like to
setup is
> > that all my http requests get redirected to my ISP's proxy server.
> >
> > I first tried doing this directly, by redirecting all port 80 outgoing
to my
> > ISP's proxy.
> >
> > rdr ed1 0/0 port 80 -> a.b.c.d port 3128
> >
> > It appears that they don't have it setup to accept transparent requests
as
> > it always seems to report an "invalid host header" or the like.
> >
> > So I was trying to setup the following.
> >
> > redirect all traffic to my own squid proxy.
> > rdr ed1 0/0 port 80 -> 127.0.0.1 port 3128
> >
> > and I was hoping that my squid proxy, would then talk to my isp's squid
> > proxy to grab http data.
> >
> > I have the following in my squid.conf
> >
> > httpd_accel_host virtual
> > httpd_accel_port 80
> > httpd_accel_with_proxy on
> > httpd_accel_uses_host_header on
> >
> > cache_peer proxy.dsl.ca parent 3128 3130 proxy-only <- my
ISP's
> > squid proxy.
> >
> > All I seem to get with this config is a standard transparent proxy. The
> > http requests are still coming out directly from my machine instead of
> > through my isp's proxy.
> >
> > I am using 2.3STABLE of squid on FreeBSD 4.0-STABLE.
> >
> > Any help would be appreciated.
> >
> > Thanks,
> > - Will
> >
>
Received on Wed Jun 07 2000 - 19:00:36 MDT