Re: [squid-users] Problems with transparancy and pf

From: Indunil Jayasooriya <indunil75_at_gmail.com>
Date: Thu, 7 Apr 2011 09:46:04 +0530

>
> Thank you. I've split the wiki examples we have for PF into separate OpenBSD
> and FreeBSD pages and added a new section for the altered OpenBSD syntax.
>
> Would any of you mind reading through and checking the texts? please?

yes

>  http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf

OK , Thanks very much.

With Squid Cache: Version 2.7.STABLE9 on OpenBSD 4.8

I have below lines for transparency with PF

# macros
ext_if="em0"
int_if="em1"
lan_net="192.168.0.0/24"

# Deafult deny
block in log
block out log

antispoof quick for { lo $int_if $ext_if }

#These 2 are the rules for transparency with PF

pass in log on $int_if proto tcp from $lan_net to any port 80 \
    rdr-to 127.0.0.1 port 3128

pass out log on $ext_if inet proto tcp from $ext_if to any \
  port 80

-- 
Thank you
Indunil Jayasooriya
Received on Thu Apr 07 2011 - 04:16:09 MDT

This archive was generated by hypermail 2.2.0 : Thu Apr 07 2011 - 12:00:03 MDT