[squid-users] Transparent Proxy for other host problem

Hi List,

I have one server running SQUID and other server with FIREWALL:

                               |-----------INTERNET
                               |
                           SQUID
                               |
                               |
CLIENT-------------FIREWALL

I try use transparent proxy in FIREWALL but not work.
FIREWALL and SQUID running FreeBSD 4.5-STABLE

The SQUID server use --enable-ipf-transparent and the squid.conf set:

http_port 3128
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
        
ipnat in SQUID server not running.

The FIREWALL server use redirect with IPFILTER (/etc/ipnat.rules):

rdr xl0 0/0 port 80 -> X.X.X.X port 3128 tcp
rdr xl0 0/0 port 8000-9000 -> X.X.X.X port 3128 tcp
rdr xl1 0/0 port 80 -> X.X.X.X port 3128 tcp
rdr xl1 0/0 port 8000-9000 -> X.X.X.X port 3128 tcp

(X.X.X.X = SQUID server)

I access any hosts with port 80 normal, but when access any host with port 8000 or 8888 not work, any ideas?

Best Regards

--
Marcus Grando
marcus at big dot univali dot br