[tproxy] Tproxy with 2.6.15.2 --on-port-80 error

Jan Engelhardt jengelh at linux01.gwdg.de
Tue Aug 8 11:33:18 CEST 2006


>Jan,
>
>Am running the cache server with only one eth interface having a Public
>IP address i.e. eth0.

You need at least two interfaces to get any form of SNAT working 
reasonably. (but see below)

>There is no bridge interface.
>
>So, if my interface ip address is 192.168.1.1 should the tcp_outgoing
>_address be 192.168.1.1.

Yes.

>Since all the configuration looks ok now and iptables is accepting the
>command
>
>iptables -t tproxy -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j
>TPROXY --on-port 80

This is just DNAT, it will work as intended.

>could the outgoing address be the only issue?

'tproxy on' in squid.conf, of course :)

>Will check and confirm if it works with that.

Jan Engelhardt
-- 


More information about the tproxy mailing list