Re: transperant proxy using Cisco?

In message <199801061725.UAA02934@noc.radio-msu.net> you write:
|You forgot ICMP "Host Unreachable, Need Fragmentation". Of course, if
|the network subject to transparent proxying has a PMTU >= MTU
|of the proxy box's interface, that is not needed.
|But if it is not the case, you must take care of the ICMP messages,
|or the remote www-servers' TCP stacks would not be able to determine
|the correct PMTU.

[ deleted ]

|The only thing we made is a slight hacking of natd package for FreeBSD.
|
|We use it instead of ipfilter or smth. because it's user-land and is
|quite easy to hack, e.g. for the handling of the ICMPs.

Does anyone know how to achieve the same effect with a Linux box?
(i.e. the main router of my network is a Cisco, which I hope to teach
to redirect HTTP requests to a Linux box running Squid 1.1.18).

Thanks,

--Amos

--Amos Shapira | "Of course Australia was marked for
133 Shlomo Ben-Yosef st. | glory, for its people had been chosen
Jerusalem 93 805 | by the finest judges in England."
ISRAEL amos@gezernet.co.il | -- Anonymous
Received on Wed Jan 07 1998 - 11:08:06 MST