Re: [squid-users] Re-routing via firewall

This is called transparent proxying, I would suggest please take a good look
at the FAQ and
the user guide from squid's site. This issue can be resolved by using the
HTTPD_ACCELERATOR option
in the squid.conf change the options like

httpd_accel_host virtual
httpd_accel_port 80

you should 0 instead of 80 if using squid-2.4

httpd_accel_with_proxy on
httpd_accel_uses_host_header on

This will resolve ur problem ;-)

Good Luck

Talha
----- Original Message -----
From: "Deeptish Dey" <deeptish@lotus.saha.ernet.in>
To: "Joseph Haig" <jhaig@maths.man.ac.uk>
Cc: <squid-users@squid-cache.org>
Sent: Monday, October 15, 2001 12:27 PM
Subject: Re: [squid-users] Re-routing via firewall

>
>
>
> turn on the httpd_accel options right!
>
> deeptish
>
> On Mon, 15 Oct 2001, Joseph Haig wrote:
>
> :)Hello,
> :)
> :)I am having a very odd problem that I cannot understand. I do not know
> :)how best to describe it, but here goes.
> :)
> :) - I have squid working OK on my server, running SuSE Linux 7.1. If I
> :) access the proxy directly on port 3128 it workes as it should.
> :) - I have set up a firewall with iptables using SuSE's firewall setup
> :) routine. Everything on that seems to be fine as well. Well,
> :) everyting except ...
> :)
> :) - I want the firewall to redirect access to port 80 to port 3128 so
that
> :) users are forced to use the proxy, and can do so without having to
> :) change any settings. If I try this, it seems to work, except for
the
> :) fact that URLs seem to get mangled in the process. As far as I can
> :) make out, the URL that squid gets is the original with the domain
name
> :) removed. It then, understandably, cannot find the page and returns
an
> :) error. For example, a user tries to look up
'http://domain.name/page'
> :) and gets an error back saying cannot find '/page'.
> :)
> :)Maybe this isn't a squid problem but I have tried asking in other places
> :)and no one has been able to help me. If someone could just give me
*some*
> :)indication of where the fault *might* lie, that would be helpful. Then
I
> :)could go and hassle the right people. ;-)
> :)
> :)Thanks,
> :)
> :)Joe
> :)
>
Received on Mon Oct 15 2001 - 04:20:33 MDT