nixCraft

whoops sorry left that out.
my iptables rules are as follows.

Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp dpt:www to:10.10.1.123:3128
REDIRECT tcp -- anywhere anywhere tcp dpt:www redir ports 3128

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.0.0.0/8 anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

and i created a little script "in-case-shit-happens" for all the ports i need it to work on

iptables -t nat --flush

PROXY_PORTS="80 443 3128 8080"
INDEV="eth1"
PROXY="10.10.1.123:3128"

for port in $PROXY_PORTS; do
iptables -t nat -A PREROUTING -i $INDEV -p tcp --dport $port -j DNAT --to $PROXY
done

iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -j MASQUERADE

thanks a lot

no prob,
ill keep my findings posted

thanks
Rick

Please help me, I use FC 6 and default squid installed is version 2.6 stable4, and on that version they doesn't support this config
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

They use new method like this
http_port 3128 transparent

and I was set that value on my server, after that I run with
#squid -z and the system create swap etc etc

after that I run
#/etc/init.d/squid start
Starting squid: [FAILED]

and got this error message

and when I look up on /var/log/messages get this
Jan 3 17:48:21 server kernel: audit(1167821301.375:9): avc: denied { read } for pid=2292 comm="squid" name="squid.pid" dev=dm-0 ino=4424371 scontext=root:system_r:squid_t:s0 tcontext=rootbject_r:var_run_t:s0 tclass=file

What wrong? what should I do?

Please help me, thanks

Jauhari

Disable squid SELinux protection for squid daemon under the SELinux Service Protection list. Use command:
See old topic for same error
http://nixcraft.com/problem-with-squid-vt441.html

__________________
Vivek Gite
Linux Evangelist
Be proud RHEL user, and let the world know about your enterprise choices! Join RedHat user group.
Always use CODE tags for posting system output and commands!
Do you run a Linux? Let's face it, you need help

there no system-config-securitylevel command on FC6 but there are system-config-securitylevel-tui command
If I disable Firewall my Transparent proxy doesn't work
What should I do? please help, and my original squid from FC6 still doesn't work stil get this problem

Thanks