[squid-users] transparent https proxy?

From: Michael Renner <michael.renner@dont-contact.us>
Date: Sun, 26 Sep 2004 18:16:55 +0200

Moin,

I setup a perfect running squid as a transparent proxy for http access.
According to http://en.tldp.org/HOWTO/TransparentProxy.html, the gateway
redirects all communication at port 80 to the host running squid:

iptables -t nat -A PREROUTING -i eth0 -s ! 192.168.2.53 -p tcp --dport 80 -j
DNAT --to 192.168.2.53:3128
iptables -t nat -A POSTROUTING -o eth0 -s 192.168.2.0/255.255.255.0 -d
192.168.2.53 -j SNAT --to 192.168.2.1
iptables -A FORWARD -s 192.168.2.0/255.255.255.0 -d 192.168.2.53 -i eth0 -o
eth0 -p tcp --dport 3128 -j ACCEPT

Additional, squid is configured with
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

Now I thougt it's time to test a https setup. Therefore, I added one more rule
to the firewall:
iptables -t nat -A PREROUTING -i eth0 -s ! 192.168.2.53 -p tcp --dport 443 -j
DNAT --to 192.168.2.53:3128

Even the https proxy works if the squid host is configured in the browser, it
fails as soon it should work as a transparent proxy. I guess an additional
configuration is required to tell squid to work as a transparent https
proxy ... but how?

Thanks

-- 
|Michael Renner      E-mail: michael.renner@gmx.de  |
|D-72072 Tuebingen   Germany        ICQ: #112280325 |
|Germany             Don't drink as root!      ESC:wq
Received on Sun Sep 26 2004 - 10:17:11 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Oct 01 2004 - 12:00:03 MDT