ipfilter and transparent proxy through squid

[Ross Cameron]

http://coombs.anu.edu.au/~avalon/examples.html#redirection

From the VERY FIRST RESULT when I Googled for "IPfilter transparent proxy".
Next time maybe try some reasearch of you're own?




"Opportunity is most often missed by people because it is dressed in
overalls and looks like work."
Thomas Alva Edison
Inventor of 1093 patents, including:
The light bulb, phonogram and motion pictures.

Hello,
how can I achieve the same as stated in the link below, but using ipfilter?
http://www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html
thanx for any help
Gabriele.
<http://www.sonicle.com> *Gabriele Bulfon - Sonicle S.r.l.*
Tel [phone] Int. 30 - Fax [phone]
via Enrico Fermi 44 - 20090, Assago - Milano - Italy
http://www.sonicle.com

[Jim Klimov]

rdr igb0 0.0.0.0/0 port 80 -> 127.0.0.1 port 8080
how can I decide to "transparent proxy" just specific clients?
also, I may want to NOT "transparent proxy" when going to specific
destinations (such as
internal web servers).
thanx for any help.
Gabriele.

Well, on a different occasion we have a NAT ruleset with
many exceptions, which may serve as a syntax exapmle:

# Local IPs go unchanged
map elxl1 from 192.168.129.0/24 to 192.168.186.0/24 -> 0.0.0.0/0
map elxl1 from 192.168.129.0/24 to 192.168.187.0/24 -> 0.0.0.0/0
map elxl1 from 192.168.129.0/24 to 192.168.188.0/24 -> 0.0.0.0/0

map elxl1 from 192.168.119.0/24 to 192.168.186.0/24 -> 0.0.0.0/0
map elxl1 from 192.168.119.0/24 to 192.168.187.0/24 -> 0.0.0.0/0
map elxl1 from 192.168.119.0/24 to 192.168.188.0/24 -> 0.0.0.0/0

# NAT for a specific subnet going to default route
map elxl1 from 192.168.129.224/28 ! to 192.168.186.0/22 -> 93.175.31.10/32

I think when you use the rules like the last one,
only the first line for a given source IP/net
actually matters. If you have other exclusions
this way, they may get "shadowed" by the first.

And you can't use pools (as of IPF4 at least)
in NAT configs, so the setup file gets very big.
--
+============================================================+
| |
| Êëèìîâ Åâãåíèé, Jim Klimov |
| òåõíè÷åñêèé äèðåêòîð CTO |
| ÇÀÎ "ÖÎÑ è ÂÒ" JSC COS&HT |
| |
| [phone] (cellular) mailto:***@cos.ru |
| CC:***@cos.ru,***@mail.ru |
+============================================================+
| () ascii ribbon campaign - against html mail |
| /\ - against microsoft attachments |
+============================================================+