Re: ipfw + trasnparent proxy

From: Bob Hall (rjhjr_at_cox.net)
Date: 09/17/03

  • Next message: Bob Hall: "Re: ipfw + trasnparent proxy" 
    Date: Tue, 16 Sep 2003 18:28:06 -0400
To: freebsd-stable@freebsd.org

    I forgot that you also need
            options IPFIREWALL
    I've added a note in my config file so I won't forget in the future.

    I don't have your original post. If you have already recompiled your
    kernel with both IPFIREWALL options, then you need to supply more
    information. The output of "ipfw list", which ports you are redirecting
    from and to, the protocal involved (e.g. HTTP, POP3), and the specific
    app that will receive the forwarded packets (e.g. squid, a POP3 proxy,
    etc).

    Bob Hall

    On Wed, Sep 17, 2003 at 08:42:56AM +1200, Marcos Biscaysaqu wrote:
    > Hi .
    > I made all that stuff, but the redirection is not working fine, and
    > the proxy work only if I set the proxy on the clients.
    > I it work with IPFilter but Im using IPFW and I can't change.
    >
    > thanks
    >
    > Bob Hall wrote:
    >
    > >On Tue, Sep 16, 2003 at 08:42:24AM +0200, Oliver Brandmueller wrote:
    > >
    > >
    > >>Hi.
    > >>
    > >>On Tue, Sep 16, 2003 at 04:53:39PM +1200, Marcos Biscaysaqu wrote:
    > >>
    > >>
    > >>>Someone know if is possible make a transparent proxy and redirect by
    > >>>ipfw, ??
    > >>>
    > >>>
    > >
    > >In addition to the previous poster's comments, you will also need to
    > >recompile the kernel with
    > >options IPFIREWALL_FORWARD #enable transparent proxy support

    I forgot that you also need
            options IPFIREWALL
    I've added a note in my config file so I won't forget in the future.

    Two comments:
    If you have already recompiled your kernel with both IPFIREWALL options,
    then you need to supply more information. Telling us that something
    doesn't work but giving us no clue as to how you've configured it makes
    it impossible for us to help you. At a minimum, we need to see your
    relevant kernal options and your IPFW ruleset.

    The standard way to reply is to bottom post. I prefer bottom posting,
    but I'll top post if I'm responding to a post where people have already
    started top posting. The important thing is to avoid confusion by being
    consistent, and the first response determines which to use. In this case,
    I was the first responder, and I bottom posted. By responded to a bottom
    post with a top post, you've created confusion.
    _______________________________________________
    freebsd-stable@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-stable
    To unsubscribe, send any mail to "freebsd-stable-unsubscribe@freebsd.org"

  • Next message: Bob Hall: "Re: ipfw + trasnparent proxy"

    Relevant Pages

    • UserName token Access denied smart client
      ... I have a webservice whose anonymous is disabled and allows basic text and windows auth. ... I am validating against local users and groups. ... Its config file contains: ... My proxy inherits from Microsoft.Web.Services2.WebServicesClientProtocol ...
      (microsoft.public.dotnet.framework.webservices.enhancements)
    • Re: Using OOP to load a config file
      ... For a given config file, Foo.conf with content along the lines, ... Instead there should be accessor methods for each key expected in the ... For this approach you need to know beforehand which keys can possibly ... "Reply" at the bottom of the article headers. ...
      (comp.lang.perl.misc)
    • Re: HttpURLConnection, Proxies and Authentication
      ... > programatically determine if my program is running through a proxy ... > server or is this a matter for a config file. ... WPAD or PAC on the network, that means that the user must have manually ...
      (comp.lang.java.programmer)
    • Re: Remoting not remoting... I dont understand why
      ... contain the information from the server, ... why must I put them into the <client> part of the client's config file while ... I should receive a proxy, ...
      (microsoft.public.dotnet.framework.remoting)
    • RE: ServicePointManger - https/proxy problem
      ... Thanks for your reply - but we solved the problem by configuring the proxy ... settings in code, rather than relying on the config file to set things. ...
      (microsoft.public.dotnet.framework.aspnet.webservices)