Re: [squid-users] Troubleshooting Tproxy Configuration

Angelo Compagnucci wrote:
> Hi List,
>
> I'll try to understand what's not working in my setup.
> I'm trying to configure tproxy on an lan but I cannot get it working.
> I'll try to explain better.
>
> My setup is resumed in the following scheme:
>
> LAN --> TRPOXY + BRIDGE + SQUID --> Default gateway.
>
> I'm working on Ubuntu 9.10 with Squid 3.. Squid and tproxy are
> correctly configured because I can read
> "Accepting spoofing http connections at ..."
> in chache.log.

Ubuntu 9.10 does not with TPROXY enabled version of Squid.
How and where did you get yours?

>
> The configuration I set up is described at the page
> http://wiki.squid-cache.org/Features/Tproxy4.
>
> This is the script i use to configure everithing:
>
> CLIENT_IFACE=eth0
> INET_IFACE=eth1
>
> ifconfig $CLIENT_IFACE down
> ifconfig $INET_IFACE down
> ifconfig $CLIENT_IFACE 0.0.0.0 up
> ifconfig $INET_IFACE 0.0.0.0 up
>
> brctl addbr br0
> brctl addif br0 $CLIENT_IFACE
> brctl addif br0 $INET_IFACE
> brctl stp br0 off
>
> dhclient br0
>
> ip rule add fwmark 1 lookup 100
> ip route add local 0.0.0.0/0 dev lo table 100
> echo 0 > /proc/sys/net/ipv4/conf/lo/rp_filter

Does changing the /lo/rp_filter above to /all/rp_filter change things?

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.7
   Beta testers wanted for 3.2.0.2