<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16608" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Tahoma size=2>So I looked at the page regarding transparent
proxies at TLDP (<A
href="http://tldp.org/HOWTO/TransparentProxy-6.html#ss6.1">http://tldp.org/HOWTO/TransparentProxy-6.html#ss6.1</A>)
based on recommendations on this list and tried it out. I'm currently
not able to get the web client to access my test server. When I look at my
wireshark results on my proxy I get something like this:</FONT></DIV>
<DIV><FONT face=Tahoma size=2></FONT> </DIV>
<DIV><FONT face=Tahoma size=2>1. 60.1.1.2
80.1.1.3 TCP xxxx > 80 [SYN]</FONT></DIV>
<DIV><FONT face=Tahoma size=2>2. 60.1.1.2
70.1.1.3 TCP xxxx > 3128 [SYN]</FONT></DIV>
<DIV><FONT face=Tahoma size=2>3. 70.1.1.3
60.1.1.2 TCP 3128 > xxxx [SYN, ACK]</FONT></DIV>
<DIV><FONT face=Tahoma size=2>
<DIV><FONT face=Tahoma size=2>4. 60.1.1.2
70.1.1.3 TCP xxxx > 3128 [RST]</FONT></DIV>
<DIV> </DIV>
<DIV>60.1.1.2 -> web client</DIV>
<DIV>70.1.1.3 -> squid proxy</DIV>
<DIV>80.1.1.3 -> web server</DIV>
<DIV> </DIV>
<DIV>My firewall has external and internal interfaces (with the internal
interface being 70.1.1.1). My proxy is able to access my web server
without issues. My squid has just these three lines changed:</DIV>
<DIV> </DIV>
<DIV>http_port 3128 transparent</DIV>
<DIV>http_access allow all</DIV>
<DIV>visible_hostname proxy</DIV>
<DIV> </DIV>
<DIV>The baffling thing is the client can access the server but only if I
explicitly tell it to use 70.1.1.3:3128.</DIV>
<DIV> </DIV>
<DIV>I'm quite stumped and help would be appreciated. Thx.</DIV>
<DIV> </DIV>
<DIV> - Joe</DIV></FONT></DIV></BODY></HTML>