OpenForum RSS: freeBSD + PF + squid

freeBSD + PF + squid (shurik)

Tue, 19 Apr 2016 14:11:06 GMT

�� 3129, ��. ��

squid.conf:
http_port 3128
http_port 127.0.0.1:3129 intercept

pf.conf:
rdr pass inet proto tcp from $lan_net to any port 80 -> 127.0.0.1 port 3129

freeBSD + PF + squid (hiding_W)

Thu, 14 Apr 2016 07:22:36 GMT

>>> �� , ��
>>> - �� . �� -�� .
>> ��
>> http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf
> �� PF offers a rdr-to option. However this not supported with any
> Squid. Use divert-to instead.

�� freeBSD. �� ( http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsdPf#pf.conf_Configuration ) �� -��:

#set skip on $int_if << These lines commented out
#set skip on $wi_if

# redirect only IPv4 web traffic to squid
rdr pass inet proto tcp from 192.168.231.0/24 to any port 80 -> 192.168.231.1 port 3129

block in
pass in quick on $int_if
pass in quick on $wi_if
pass out keep state

###########

�� - �� . �� PF^

###########

logopt = "log"
ext_if = "em0"
lan_if = "em1"

pubserv = "{ 22, 443 }"

lanserv = "{ 22, 53, 67, 80, 443 }"

icmp

freeBSD + PF + squid (omnomnim)

Wed, 13 Apr 2016 11:38:59 GMT

>> �� , ��
>> - �� . �� -�� .
> ��
> http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf

�� PF offers a rdr-to option. However this not supported with any Squid. Use divert-to instead.

freeBSD + PF + squid (omnomnim)

Wed, 13 Apr 2016 11:38:22 GMT

> �� , ��
> - �� . �� -�� .

��

http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf