[tproxy] Tproxy with --on-port-80 error

Jan Engelhardt jengelh at linux01.gwdg.de
Tue Aug 8 11:33:18 CEST 2006

>Am running the cache server with only one eth interface having a Public
>IP address i.e. eth0.

You need at least two interfaces to get any form of SNAT working 
reasonably. (but see below)

>There is no bridge interface.
>So, if my interface ip address is should the tcp_outgoing
>_address be


>Since all the configuration looks ok now and iptables is accepting the
>iptables -t tproxy -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j
>TPROXY --on-port 80

This is just DNAT, it will work as intended.

>could the outgoing address be the only issue?

'tproxy on' in squid.conf, of course :)

>Will check and confirm if it works with that.

Jan Engelhardt

More information about the tproxy mailing list