nixCraft

Hi everyone, I am new here and I need some help with the setup of my new Proxy.

<LAN> --- <e1|PROXY|e0>----<FIREWALL/ROUTER>---<INTERNET>
Well the LAN clients should have the Gateway pointing to the Proxy Server, and in the proxy server eth1 I have a NAT rule that forwards it to e0:9090

# set this system as a router for Rest of LAN
iptables --table nat --append POSTROUTING --out-interface e0 -j MASQUERADE
iptables --append FORWARD --in-interface e1 -j ACCEPT

The strange thing that is happening:

1. Without using the proxy as GW, just setting the browser to point to the Proxy:80 (it work
2. Once I setup the proxy as GW, I can't go out to the WEB, I get the following errors:

ERROR
The requested URL could not be retrieved
The following error was encountered while trying to retrieve the URL: /
Invalid URL
On the logs of the access.log I see :
172.31.X.7 NONE/400 1872 GET /favicon.ico - NONE/- text/html
172.31.X.7 NONE/400 1894 GET /Vitrine/Home/Home.aspx - NONE/- text/html
172.31.X.7 NONE/400 1906 GET /shell-programming-scripting/ - NONE/- text/html

I believe somehow the hostname address are not arraiving to the proxy,
any ideas why or how to fix it???

all right... I got it work.
The new SQUID 3.0 has a simple line to define it as TRANSPARENT.

#HEADER problem when using as Transparent Proxy
http_port <SQUID_IP>:<PORT> transparent

on older versions people used the http_accel mode to hack squid to perform transparent,
no longer it is needed