OpenForum RSS: pf+squid

pf+squid (reader)

Tue, 25 Nov 2008 08:27:58 GMT

>[�� ]
>>>12}
>>>pass out on $ext_if proto {tcp, udp} all flags S/SA keep state
>>>
>>>�� ...
>
>Squid � �� . ��
>��, �� , �� pf ��
>�� , �� , ��
>�� 80 �� , � ��
>�� squid.

�� 80 ��

pf+squid (radimon)

Tue, 25 Nov 2008 08:09:04 GMT

>[�� ]
>>! 192.168.0.1 port 80
>>
>>pass on lo0
>>pass proto tcp to any port $tcp_services keep state
>>pass proto udp to any port $udp_services keep state
>>pass on $ext_if inet proto icmp icmp-type {0, 3, 4, 8, 11,
>>12}
>>pass out on $ext_if proto {tcp, udp} all flags S/SA keep state
>>
>>�� ...

Squid � �� . �� , �� , �� pf �� , �� , �� 80 �� , � �� squid.

pf+squid (reader)

Tue, 25 Nov 2008 07:24:33 GMT

>[�� ]
>
>pass proto tcp to any port $tcp_services keep state
>pass proto udp to any port $udp_services keep state
>pass on $ext_if inet proto icmp icmp-type {0, 3, 4, 8, 11,
>12}
>pass out on $ext_if proto {tcp, udp} all flags S/SA keep state
>
>
>�� squid (�� transparent). �� , ��
>�� 3128 � �� ? ��

� �� squid �� ? �� squid �� transparent, �� .
>[�� ]
>ext_if="rl0"
>int_if="bfe0"
>
>tcp_services = "{ ssh, pop3, smtp, domain, www }"
>udp_services = "{ domain }"
>
>scrub in all
>
>nat on $ext_if from $int_if:network to any -> ($ext_if)
>rdr on $int_if proto tcp from any to any port 3128 -> 127.0.0.1

�� squid �� transparent
>[�� ]
>! 192.168.0.1 port 80
>
>pass on lo0
>pas