Support
Joined: 09 Oct 2002 Posts: 175 Location: Lausanne, Switzerland
|
Posted: Mon Jan 13, 03 19:07 Post subject: How do I make transparent proxy with the Ethernet III? |
|
|
Making the MultiCom act as a transparent proxy is not difficult to do but you must be sure that your choice of Proxy software supports a transparent proxy option. For instance, with the Squid Proxy software, transparent proxying is disabled by default and enabling it may change certain functionalities.
For the MultiCom, starting from a default configuration,
- enable NAT on the LAN interface with a rule to map 8080 to the LAN port 80 (allowing you to continue to get access to the MultiCom after configuring the transparent proxy redirection)
- configure your DMZ to 11.0.0.1/8 and to give only 1 address to the DMZ network... 11.0.0.2
- configure your Squid proxy as a DHCP client on the DMZ network
- activate MISC>NAT
- under MISC>NAT add a rule such as
NAT option | parameter | protocol: | TCP | source: | 10.0.0.0/8 | source port: | any | destination: | any | destination port: | mapto | to address: | 11.0.0.2 | to port: | 8888 | type: | destination |
- Configure Squid to support transparent proxy redirection
In section 17 of the Squid 2.4Stable3 FAQ there is description of using Squid in this capacity (please read this and the squid.conf file - httpd_acceleration for a full explanation of what the following code is doing.)
http_port 8888
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
|
|