Re: Re: [squid-users] transparent proxy with server box itself

>>
>>> iptables -t nat -A OUTPUT -i eth0 -p tcp --dport 80 -j REDIRECT
>>> --to-port 3128

I think the command should be:
    iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

Please try it.
>>
>> This requires support for local NAT to be enabled in your kernel. Normally
>> not enabled.
>>
>> Please note that it is absulutely required that you also add rules
>> allowing Squid to access the Internet, if not the above rule will cause a
>> loop where Squid gets redirected back on itself.
>>
>> Regards
>> Henrik
>When I lsmod, I see ipnat among the loaded modules. Does this mean that
>local NAT is enabled?
>
>Regards,
>Michael Flora
>
>"You know my method. It is founded upon the observance of trifles." --
>Sherlock Holmes in "The Boscombe Valley Mystery"

        Regards,
        
           David
Received on Wed Mar 03 2004 - 20:38:28 MST