On 7/22/06, ankush grover <ankushcentos@gmail.com> wrote:

> Any pointers what can be the problem ?
The only difference i can see with my configuration is

iptables -A PREROUTING -t nat -s 10.1.1.0/24 -i eth1 -p tcp --dport 80
-j REDIRECT --to-port 3128
as you can see i have the -s option enabled, i just wonder if you are
creating a loop and making squid to go back to himself when "he" wants
to go for the webpage?

hey,

I change the settings for iptables below is the iptables entry

iptables -A PREROUTING -t nat -s 192.168.2.0/24 -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 5678

But still I am not able to access Internet from the 192.168.3.0/24 network. Some of the logs of iptables connection ( /proc/net/ip_connectrack)

udp      17 27 src=192.168.2.83 dst=202.54.15.30 sport=32835 dport=53 packets=2 bytes=148 [UNREPLIED] src= 202.54.15.30 dst=192.168.2.83 sport=53 dport=32835 packets=0 bytes=0 use=1
tcp      6 431964 ESTABLISHED src=192.168.2.83 dst=192.168.1.125 sport=32794 dport=22 packets=1110 bytes=73521 src=192.168.1.125 dst=192.168.2.83 sport=22 dport=32794 packets=940 bytes=262374 [ASSURED] use=1

Machines Configuration are below

Centos4.0
   eth0:   192.168.1.125/24
   eth1:   192.168.2.126/24

Debian:
   eth0: 192.168.2.83/24 gateway: 192.168.2.126/24 (eth1 of Centos)

I am still not able to guess which transparent proxy is not working.

Any other pointers?

Thanks & Regards

Ankush Grover