tproxy patch: tproxy-kernel-2.6.25-20080519-165031-1211208631.tar.bz2
iptables: 1.4
iptables patch: tproxy-iptables-1.4.0-20080521-113954-1211362794.patch

I think everything went well on the patching of the kernel and patching of iptables.  So here is where I am.  I am using the latest version of haproxy, which should work.

I think the issue that I am having is due to the iptables.  I don't think iptables is letting haproxy connect to the secondary host server.  So haproxy is listening on port 50080, which is where I have tproxy sitting.  Please take a look at my iptables entry and tell me if I am missing anything.  I can see that my connection hits the proxy server, but it does not relay to the secondary host.

Here is my iptables:
echo 1 > /proc/sys/net/ipv4/ip_forward
/usr/local/sbin/iptables -t mangle -A PREROUTING -p tcp --dport 80 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 50080
ip rule add fwmark 1 lookup 100
ip route add local 0.0.0.0/0 dev lo table 100
/usr/local/sbin/iptables -t mangle -N DIVERT
/usr/local/sbin/iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT
/usr/local/sbin/iptables -t mangle -A DIVERT -j MARK --set-mark 1
/usr/local/sbin/iptables -t mangle -A DIVERT -j ACCEPT

The ip for the proxy, where tproxy is sitting is 192.168.0.4 and the host server(running IIS) is 192.1680.06.

I would like to use squid, but I am not familiar with it, like I am with haproxy.

Any info would be appreciated.  I am stuck now.

Thanks.
Mike