[FUGSPBR] Proxy Transparente

[Leandro]

Olá Lista 

Socorro por favor 

Seguinte instalei o squid 2.4 tudo bleleza, depois que esle esta rodando se eu 
vou no cliente e expecifico o servidor nas configuracoes de proxy ele 
funciona beleza navega e tudo agora estou precisando colocar ele pra 
funcionar transparente mas nao estou conseguindo acertar as regras,
	teria como alguem me ajudar estou precisando disso urgente mesmo
outra coisa nao sei se estou trabalhando com o natd certo 



meu firewall

#!/bin/sh
#
#
ipfw -f flush
ipfw -f pipe flush
ipfw -f queue flush

# Setup Loopback
#
ipfw add 30 permit all from any to any via lo0
ipfw add 31 drop all from any to 127.0.0.0/8
ipfw add 32 drop ip from 127.0.0.0/8 to any

# Firewall
#
ipfw add 40 drop tcp from any to any 445
ipfw add 41 drop tcp from any to any 17300
ipfw add 45 drop udp from any 137-139 to any
ipfw add 46 drop udp from any to any 137-139
ipfw add 47 drop udp from any 2001 to any
ipfw add 48 drop udp from any to any 2001
ipfw add 49 drop udp from any 192 to any
ipfw add 50 drop udp from any to any 192
ipfw add 51 drop udp from any 67 to any
ipfw add 52 drop udp from any to any 67
ipfw add 53 drop udp from any 68 to any
ipfw add 54 drop udp from any to any 68
ipfw add 55 drop udp from any to any 1900
ipfw add 56 permit icmp from any to any icmptypes 0,3,8
ipfw add 57 drop icmp from any to any

# smtp
ipfw add 60 permit tcp from me to mail.praiasdeminas.com.br smtp out xmit rl0
ipfw add 61 permit udp from me to mail.praiasdeminas.com.br smtp out xmit rl0
ipfw add 62 drop log tcp from me to any smtp out xmit rl0
ipfw add 63 drop log udp from me to any smtp out xmit rl0

# Proxy
/sbin/ipfw add 70 allow tcp from me to any 80
/sbin/ipfw add 71 fwd 127.0.0.1,3128 tcp from any to any 80

# Natd
/sbin/ipfw add 100 divert natd all from 10.1.1.0/24 to any via rl0
/sbin/ipfw add 101 divert natd all from 10.1.2.0/24 to any via rl0
/sbin/ipfw add 102 divert natd all from any to 200.165.58.9 via rl0

meu Kernel

options IPFW2
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPFIREWALL_VERBOSE
options IPFIREWALL_FORWARD
options DUMMYNET
options HZ=1000
options TCP_DROP_SYNFIN
options RANDOM_IP_ID
options BRIDGE
options IPDIVERT
options IPSTEALTH
options NMBCLUSTERS=65536
options MSGBUF_SIZE=1048576
options SYSVMSG
options MSGMNB=16384
options MSGMNI=41
options MSGSEG=2049
options MSGSSZ=64
options MSGTQL=512
options SHMSEG=16
options SHMMNI=32
options SHMMAX=2097152
options SHMALL=4096
options TCPDEBUG


_______________________________________________________________
Sair da Lista: http://www2.fugspbr.org/mailman/listinfo/fugspbr
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/