problem in configuring squid transparent proxy on FC3

Ankush Grover ankush174 at gmail.com
Tue Jul 11 11:28:49 UTC 2006


hey friends,

I am trying to configure Squid Transparent Proxy on FC3. I am testing
the scenario on 2 machines. The FC3 machines has got 2 lan cards

eth0:   192.168.1.125/24
eth1:   192.168.2.126/24

Another machine is having only one LAN Card

eth0:  192.168.2.88/24

I added these lines for transparent proxy in squid.conf
http_port 3128  (by default)
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

I have also added these lines to squid.conf

acl mynetwork src 192.168.1.125
acl mynetwork1 src 192.168.2.0
http_access allow mynetwork
http_access allow mynetwork1

Configured iptables to redirect the request to the proxy from the
domain 192.168.2.0 to port 3128

iptables -t nat -A PREROUTING -i eth1 -s 192.168.2.0/24 -p tcp --dport
80 -j REDIRECT --to-port 3128

But when I gave the below command to list the iptables rules there was
no rules added to the iptables

iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

I saved and restart iptables many times even flushed the iptables few
times and again added the NAT rule but everytime iptables -L shows
empty rules.

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.2.0     *               255.255.255.0   U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
169.254.0.0     *               255.255.0.0     U     0      0        0 eth1
default         192.168.1.1     0.0.0.0         UG    0      0        0 eth0

lsmod   command output
Module                  Size  Used by
ipt_REDIRECT            2113  20
iptable_nat            23037  2 ipt_REDIRECT
ip_conntrack           40565  1 iptable_nat
iptable_filter          2753  0
ip_tables              16705  3 ipt_REDIRECT,iptable_nat,iptable_filter


I am able to ping from 192.168.1.125 to 192.168.2.88. There is one
more problem I am not able to ssh onto another server (FC3)  from the
squid server.

ssh -l tester 192.168.1.122
Received disconnect from 192.168.1.122: 2: Too many authentication
failures for tester

As this is the testing scenario only 2 machines are in domain
192.168.2.0 ( one machine running windows xp and other is FC3 with 2
lan cards and I am using these machines for testing squid transparent
proxy ) all other machines in the network are in the domain
192.168.1.0 so I should be able to ssh onto the machine 192.168.1.122
as the LAN Card eth0 on FC3 machine (192.168.1.125) is connected to
the network 192.168.1.0.

Please guide me what wrong I am doing ?

Thanks & Regards

Ankush Grover




More information about the users mailing list