This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos doesn't redirect http traffic to my squid proxy transparent

Good morning, 

I am beginner with sophos.
I project to redirect (through sophos) HTTP requests of LAN Network  to the proxy server.


Topology=

External address===sophos====proxy server 172.17.1.14
----------------------------------||--------------------------
-----------------------------LAN  Network 172.17.8.0 --------


ip External address=41.x.y.z
Sophos version =9.310-11

Configurations=
Then I did this on sophos web GUI, hoping to redirect all the http requests to the proxy:
1)Network Protection >NAT >NAT
NAT:
Rule Type: DNAT

Matching Condition=
For traffic from :LAN Network
Using service : HTTP
Going to : EXTERNAL ADDRESS

Action=
Change the destination to =proxy-server
And the service to :=Port 3129

Automatic Firewall rule= checked

2)Network Protection >Firewall> Rules
Sources:LAN Network
Services:Any
Destinations=proxy-server

------------------------------------------------------------------------
View rules on sophos CLI
sophos_firewall:/home/login iptables -t nat -L -n -v
Chain USR_OUTPUT (1 references)
 pkts bytes target     prot opt in     out     source               destination 
    0     0 DNAT       tcp  --  *      *       172.17.8.0/25       41.x.y.z     tcp spts:1:65535 dpt:80 to:172.17.1.14:3129


Chain USR_PRE (1 references)
 pkts bytes target     prot opt in     out     source               destination     
   0     0 DNAT       tcp  --  *      *       172.17.8.0/25        41.x.y.z       tcp spts:1:65535 dpt:80 to:172.17.1.14:3129

-----------------------------------------------------------------------------
Checking port 3129 on squid server
root@proxyserver-# netstat -tpln | grep 3129
tcp        0      0 172.17.1.14:3129        0.0.0.0:*               LISTEN      


Sadly, no redirection happens. The LAN Network don't seem to be using the proxy.. 
Any advice is appreciated!
Thank you in advance.

Andronic


This thread was automatically locked due to age.
Parents Reply Children
No Data