Re: [squid-users] "Squid Address" itself in, requests?

On Tue, 18 Sep 2001, Henrik Nordstrom wrote:

> Brian wrote:
>
> > Yes I am using interception on this box.
>
> > visible_hostname constellation.shreve.net
> > httpd_accel_host virtual
> > httpd_accel_port 80
> > httpd_accel_with_proxy on
> > httpd_accel_uses_host_header on
>
>
> Fine.
>
> What is your method of TCP interception?

Henrik,

Currently iptables:

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

Although previously I used ipchains:

/sbin/ipchains -A input -j ACCEPT -i lo
/sbin/ipchains -A input -j ACCEPT -p tcp -d 208.206.76.44 80
/sbin/ipchains -A input -j REDIRECT 3128 -p tcp -s 0.0.0.0/0 -d 0.0.0.0/0 80

>
> --
> Henrik Nordstrom
> Squid Hacker
>

-----------------------------------------------
Brian Feeny, CCIE #8036 email:signal@shreve.net
Network Engineer phone:318.222.2638x109
ShreveNet Inc. fax: 318.221.6612
Received on Tue Sep 18 2001 - 11:41:34 MDT