Digital
As-Salamu Alaykum
Premium
join:2000-07-24
Mentor, OH
| Transparent Proxy w/out a gateway?
Here's the situation. I have a gateway already configured, and was looking to use an older server that I Have laying around as a Squid server for a network of about 30 PCs (computer repair shop) I don't want to have to setup a proxy on the computers we repair, nor do I want to have to setup the proxies on the 30 systems we have here as the proxy may go down at some point, etc.
Is there a way to configure squid to automatically pickup traffic on the network and cache it without setting firewall rules/using it on the gateway box? I would use it on the gateway box, but it's a WRT54G.
--
Read my blog. |
|
deblin
Dark Side of the Moon
Premium,MVM
join:2001-09-01
Middletown, DE | Yes, it's possible. Here's a Linux+SQUID mini HOWTO.
--
"Hey honey! Do you think KFC's still open?" |
|
bentman78
Bentley
join:2004-04-16
Arlington, VA | interesting. Now how to do this with pf? |
|
deblin
Dark Side of the Moon
Premium,MVM
join:2001-09-01
Middletown, DE
 ·Verizon FIOS
| Should work the same. You just have to nat connections bound for port 80 and redirect them to localhost on whatever port squid is running on 
--
"Hey honey! Do you think KFC's still open?" |
|
Digital
As-Salamu Alaykum
Premium
join:2000-07-24
Mentor, OH
| reply to Digital
Sadly, I still cannot get it to work.
I decided I would go with eBox for simplicity sake, but now that's created more problems. eBox allows for a transparent proxy server, but I cannot figure out what I need to setup to get that to work?
--
Read my blog. |
|
shdesigns
Powered By Infinite Improbabilty Drive
Premium
join:2000-12-01
Stone Mountain, GA
 ·Atlantic Nexus
| reply to Digital
You will need to inseter something between the PC's and the gateway/router orbe able to configure the gateway to forward data through a proxy. Most DOHO routers do not thave outgoing filters that can handle this.
You would have to set up one of 4 things:
1. Set the router to forward outgoing packets from local LAN devices to the squid server. Might be doable with 3rd party firmware on router.
2. Configure a DHCP parameter to set the proxy (not transparent and is not supported by all clients.)
3. Use a PC with two NICs as the router and set up the transparent proxy. You could set up one PC as the router and the proxy. Set WRT54G as an AP.
4. Similar to 3, but set up PC as router/proxy after WRT54G.
I set up transparent proxy here. I have a wireless AP that all connections are fed through the squid proxy. That allowed me to use squid to throttle the data. Was only a few rules added to iptables on my linux router.
--
Scott Henion
Embedded Systems Consultant, shenion on #ATU @irc.freenode.netSHDesigns home |
|
bentman78
Bentley
join:2004-04-16
Arlington, VA | reply to deblin
or remote host right? I don't want to run squid on the same box. |
|
