!! Transparent SQUID !!

[Peter Sedivy - PeSe]

freebsd at devnet.sk wrote:
> Dobry den,
> mam dost surny problem.
> 
> Mam 2 PC + local network
> 
> PC1 = gateway: IP:213.151.240.120
>      ethernety: sk0 - 213.151.240.119 - PRIPOJENIE NA NET
>                 sk1 - 213.151.240.121 - PC2 - PROXY
>                 sk2 - 192.168.15.1 - local network (tento pc sluzi ako gw pre
> 192.168.15.0)
> 
> a potrebujem rozbehnut transparentneho squida. Mam nastavene vsetko podla
> http://ezine.daemonnews.org/200209/squid.html
> 
> Natovanie mam takto, cez ipnat:
> 
> map sk0 192.168.15.0/24 -> 0.0.0.0/32
> map sk0 213.151.240.0/24 -> 0.0.0.0/32
> 
> #rdr sk2 192.168.15.0/24 port 80 -> 213.151.240.121 port 3128 tcp (pokialmam
> toto zapnute, tak mi nefunguje http z local netork)
> 
> Ako to mam vyriesit ???
> Firewall to neblokuje na  100%.
> 
> Prosim, ozvite sa co najskor,
> s pozdravom
> DNX

Dobry den
chcem len upozornit na jednu vec. Ak pouzivate aj transp. proxy a 
zaroven aj autorizaciu ....

v konfiguraku squid uvidite:
# NOTE: proxy_auth requires a EXTERNAL authentication program
# to check username/password combinations (see
# auth_param directive).
#
# WARNING: proxy_auth can't be used in a transparent proxy. It
# collides with any authentication done by origin servers. It may
# seem like it works at first, but it doesn't.