!! Transparent SQUID !!

[freebsd at devnet.sk]

Cituji z emailu od Peter Sedivy - PeSe <pese at pese.sk>:

> freebsd at devnet.sk wrote:
> > Dobry den,
> > mam dost surny problem.
> >
> > Mam 2 PC + local network
> >
> > PC1 = gateway: IP:213.151.240.120
> >      ethernety: sk0 - 213.151.240.119 - PRIPOJENIE NA NET
> >                 sk1 - 213.151.240.121 - PC2 - PROXY
> >                 sk2 - 192.168.15.1 - local network (tento pc sluzi ako gw
> pre
> > 192.168.15.0)
> >
> > a potrebujem rozbehnut transparentneho squida. Mam nastavene vsetko podla
> > http://ezine.daemonnews.org/200209/squid.html
> >
> > Natovanie mam takto, cez ipnat:
> >
> > map sk0 192.168.15.0/24 -> 0.0.0.0/32
> > map sk0 213.151.240.0/24 -> 0.0.0.0/32
> >
> > #rdr sk2 192.168.15.0/24 port 80 -> 213.151.240.121 port 3128 tcp
> (pokialmam
> > toto zapnute, tak mi nefunguje http z local netork)
> >
> > Ako to mam vyriesit ???
> > Firewall to neblokuje na  100%.
> >
> > Prosim, ozvite sa co najskor,
> > s pozdravom
> > DNX
>
> Dobry den
> chcem len upozornit na jednu vec. Ak pouzivate aj transp. proxy a
> zaroven aj autorizaciu ....
>
> v konfiguraku squid uvidite:
> # NOTE: proxy_auth requires a EXTERNAL authentication program
> # to check username/password combinations (see
> # auth_param directive).
> #
> # WARNING: proxy_auth can't be used in a transparent proxy. It
> # collides with any authentication done by origin servers. It may
> # seem like it works at first, but it doesn't.
>
>
> --
> FreeBSD mailing list (users-l at freebsd.cz)
> http://www.freebsd.cz/listserv/listinfo/users-l
>


Nema nahodou niekto riesenie pre ipnat ???