qba napisał/a:
dopinam sie do pytania gdyż bede chciał też sobie postawić squida w sieci

iptables -t nat -I PREROUTING -i br0 -s ! 192.168.1.1 -d ! 192.168.1.0/24 -p tcp --dport 80 -j DNAT --to 192.168.1.3:8080
iptables -t nat -I POSTROUTING -o br0 -s 192.168.1.0/24 -d 192.168.1.3 -j SNAT --to 192.168.1.1
iptables -I FORWARD -s 192.168.1.0/24 -d 192.168.1.3 -i br0 -o br0 -p tcp --dport 8080 -j ACCEPT

qba napisał/a:
Arteqw hmm ale w w pamieci wrtka nie wiele sie zmiesci cache .. chyba ze da sie przyłaczyc dysk sieciowy jako temp ? to by było ciekawe

qba napisał/a:
a nie dało by się tak zrobic zeby podmonotwać dysk sieciowy ? było by to dość dobre rozwiązanie

Slig napisał/a:
[...] squid.conf ustawić transparent proxy, czyli:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_single_host off
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

Pozdrawiam !

# TAG: http_port
# Usage: port [options]
# hostnameort [options]
# 1.2.3.4ort [options]
#
# The socket addresses where Squid will listen for HTTP client
# requests. You may specify multiple socket addresses.
# There are three forms: port alone, hostname with port, and
# IP address with port. If you specify a hostname or IP
# address, Squid binds the socket to that specific
# address. This replaces the old 'tcp_incoming_address'
# option. Most likely, you do not need to bind to a specific
# address, so you can use the port number alone.
#
# The default port number is 3128.
#
# If you are running Squid in accelerator mode, you
# probably want to listen on port 80 also, or instead.
#
# The -a command line option will override the *first* port
# number listed here. That option will NOT override an IP
# address, however.
#
# You may specify multiple socket addresses on multiple lines.
#
# options are:
# transparent Support for transparent proxies
# vhost Accelerator using Host directive
# vport Accelerator with IP virtual host support
# vport= As above, but uses specified port number
# rather than the http_port number.
# defaultsite= Main web site name for accelerators.
# urlgroup= Default urlgroup to mark requests
# with (see also acl urlgroup and
# url_rewrite_program)
# protocol= Protocol to reconstruct accelerated
# requests with. Defaults to http.
# no-connection-auth
# Prevent forwarding of Microsoft
# connection oriented authentication
# (NTLM, Negotiate and Kerberos)
# tproxy Support Linux TPROXY for spoofing
# outgoing connections using the client
# IP address.
#
# If you run Squid on a dual-homed machine with an internal
# and an external interface we recommend you to specify the
# internal addressort in http_port. This way Squid will only be
# visible on the internal address.
#
# Squid normally listens to port 3128
http_port 3128

iptables -t nat -I PREROUTING -i br0 -s ! 192.168.0.1 -d ! 192.168.0.0/24 -p tcp --dport 80 -j DNAT --to 192.168.0.33:3128
iptables -t nat -I POSTROUTING -o br0 -s 192.168.0.0/24 -d 192.168.0.33 -j SNAT --to 192.168.0.1
iptables -I FORWARD -s 192.168.0.0/24 -d 192.168.0.33 -i br0 -o br0 -p tcp --dport 3128 -j ACCEPT

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http://www.onet.pl/

The following error was encountered:

* Access Denied.

Access control configuration prevents your request from being allowed at this time. Please contact your service provider if you feel this is incorrect.

Your cache administrator is webmaster.
Generated Sat, 23 Dec 2006 23:14:01 GMT by none (squid/2.6.STABLE6-NT)

ArteQ napisał/a:


daruj se squida, tego molocha, zainstaluj polipo - tez proxy

własnie zrobiłem pakiet bo mi sie tez podoba :] a squid ciezko ustawic

aaaaaa pakiet pod OpenWrt only ;]

dutche napisał/a:
czego uwazasz ze polipo lepsze od squida??

BaGRoS napisał/a:
Działa pod windowsem 2k, taką wersje mam na serwerze kupiłem z 2 procesorową maszyną za 300zł??