Repost : Router problems with transparent proxy

[Henrik Nordstrom]

Juri Haberland wrote:

> Would it be legal to route such traffic to the squid box (I'm thinking
> of iproute2) and do redirection there?

Sure, but you most likely need my connection mark capability to proper route everything belonging to
the redirected connection.. Not sure how to route ICMP packets belonging to a specific TCP session
otherwise.

> And what about squid-2.3(-stable4)? I tried it with the squid RPM from
> RH7.1 and it *seemed* to work. Actually I don't know whether squid-2.3
> has this configure option, but if it has it was compiled without it...

The netfilter integration is only available in Squid-2.4 and later. There may be a patch for earlier
Squid versions floating around somewhere..

--
Henrik Nordström
Squid Hacker