Re: [squid-users] [help] setting up firewall policy for transparent (single-homed host) proxy

> on your squid box,
> pls add below rule.
>
> iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j
> REDIRECT --to-port 3128

Where did you add below SNAT rule? On squid box or iptables box ?
it should be added to iptables box. NOT to SQUID box.

> in addition to that, Your squid box needs a SNAT rule , if it is
> behind the SNATed networlk. Pls add it to iptables box.

> rule like below. 1.2.3.4 is the external ip of iptables firewall box and ip address
> 192.168.101.1 is the ip address of squid box. pls change it
> accordingly
>
> iptables -t nat -A POSTROUTING -o eth0 -s 192.168.101.1 -j SNAT
> --to-source 1.2.3.4

-- 
Thank you
Indunil Jayasooriya