This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Transparent Proxy (but, not using Astaro)

I'd like to have a transparent proxy, but not using Astaro's squid copy. I have some specific requirements that I won't be able to address with Astaro's squid implementation, but would like to be able to forward all 80 traffic to another box on port 8080 that is running a proxy.

10.1.x.x:80 --> Firewall --> 10.1.20.125:8080 --> Firewall --> Internet

Can that be done?...

..n8

This thread was automatically locked due to age.

Parents

0 tom_01 over 23 years ago

yes, that is just a simple DNAT task [:)]

/tom
Cancel
Vote Up 0 Vote Down

Cancel
0 n8_03 over 23 years ago in reply to tom_01

That's what I had orginally thought-- I figured I would do:

PRE-NAT POST-NAT
ANY/80 PROXY/8080

However, the pre-nat doesn't allow ANY as a selection. How then, do I forward all HTTP requests orginating from internal to another internal machine on another port?

Or am I just way off.

.n8
Cancel
Vote Up 0 Vote Down

Cancel
0 andreas over 23 years ago in reply to n8_03

Hi Nathan,
you won't need any, since only your internal lan should use the proxy.
Please add a network group for your internal lan 10.1.x.x / 255.255.0.0 and use that group when DNAT'in.

andreas
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 andreas over 23 years ago in reply to n8_03

Hi Nathan,
you won't need any, since only your internal lan should use the proxy.
Please add a network group for your internal lan 10.1.x.x / 255.255.0.0 and use that group when DNAT'in.

andreas
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data