Re: [squid-users] brige+ squid + tproxy on a box running a web server

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Sun, 15 Aug 2010 23:23:21 +0200

sön 2010-08-15 klockan 00:37 +0000 skrev Mamadou Touré:
> Hi,
> all on my brige+ squid + tproxy i'm running a web server.
> and i cannot access to web page hosted on the box.
> in my access.log i have a TCP_MISS/503 3157 GET
>
> my config
> +++++++++++++++++++++++++++++++++
> iptables -t mangle -A PREROUTING -p tcp --dport 80 -j TPROXY
> --tproxy-mark 0x1/0x1 --on-port 3129

You need to limit that to the bridge interfaces, or add an exclusion
allowing direct access to the box without gettig redirected.

Exclusions is done by adding -j ALLOW rules before the -j TPROXY rule.

Regards
Henrik
Received on Sun Aug 15 2010 - 21:23:25 MDT

This archive was generated by hypermail 2.2.0 : Mon Aug 16 2010 - 12:00:03 MDT