hi. i'm make a bridge whit open suse 10.2 and get tproxy patched on the box. all step has finished,and no error... at the squid acceess.log i see the request traffict from client ip, but why on the web server log or on the router the request for the web is came from the bridge ip not the original ip ( client ). I have net.ipv4. & ip_nonlocal_bind = 1 my squid get compiled whit --enable-linux-tproxy. when i tcpdump on the ethetnet that shown a request / search the dns / ip of the destination server but, the squid did not request the web.and the client get error message ( 22 )
here is my network diagram :
Client ( 10.0.0.0/24 ) < -- > | eth0 = Bridge = eth1 | <--> router (10.0.0.254) <--> web srvr
|
tproxy + squid 2.6 stable 21
here the script :
ifconfig eth0 down
ifconfig eth1 down
ifconfig eth0 0.0.0.0 up
ifconfig eth1 0.0.0.0 up
brctl addbr br0
brctl addif br0 eth0
brctl addif br0 eth1
ifconfig br0 10.0.0.250 up
route add default gw 10.0.0.254
brctl stp off
btctl setfd br0 off
ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 --ip-destination-port 80 -j redirect --redirect-target ACCEPT
iptables -t tproxy -A PREROUTING -i br0 -p tcp -m tcp --dport 80 -j TPROXY --on-port 3128