FreeBSD RDR question

[Monah Baki]

The user cannot access the internet. If he enters however the IP and port
number in his browser he can access the internet.

I have the server running in intercept mode, in my squid.con

http_port 3128 intercept

http_port 80



The log files display00:00:19.008499 rule 0..16777216/0(match): pass in on
bge0: 10.0.0.111.5678 > 255.255.255.255.5678: UDP, length 93

00:00:00.764414 rule 0..16777216/0(match): pass in on bge0: 10.0.0.50.5678
> 255.255.255.255.5678: UDP, length 91

00:00:00.120755 rule 0..16777216/0(match): pass in on bge0: 10.0.0.56.5678
> 255.255.255.255.5678: UDP, length 91

00:00:00.070800 rule 0..16777216/0(match): pass in on bge0: 10.0.0.53.5678
> 255.255.255.255.5678: UDP, length 91

00:00:00.150908 rule 0..16777216/0(match): pass in on bge0: 10.0.0.55.5678
> 255.255.255.255.5678: UDP, length 91

00:00:09.898853 rule 0..16777216/0(match): pass in on bge0: 10.0.0.14.63515
> 10.0.0.24.22: Flags [S], seq 2684525113, win 8192, options [mss
1460,nop,wscale 2,nop,nop,sackOK], length 0

00:00:00.186720 rule 0..16777216/0(match): pass in on bge0: 10.0.0.54.5678
> 255.255.255.255.5678: UDP, length 91




Thanks



On Sat, Feb 28, 2015 at 7:10 AM, Odhiambo Washington <odhiambo at gmail.com>
wrote:

> By 'it's not working', what do you mean?
>
> What do you see in squid's access log? That would make more sense.
>
> Does  10.0.0.24 know how to get to the Internet?
>
> I need to read about WCCP2 because never used it before. It did look
> simple enough though from the HOWTOs I read.
>
>
>
>
> On 28 February 2015 at 15:03, Monah Baki <monahbaki at gmail.com> wrote:
>
>> Hi all,
>>
>> I have a freebsd 10.1 running squid, it has a single interface (bge0). My
>> Cisco is doing policy based routing and forwarding all http request to my
>> Freebsd server.
>>
>> In my pf.conf I have the following rule:
>>
>> rdr on bge0 inet proto tcp from any to any port 80 -> 10.0.0.24 port 3128
>>
>>
>> Do I need to add anything else? Reason I ask, it's not working.
>>
>>
>> Thanks
>> Monah
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "
>> freebsd-questions-unsubscribe at freebsd.org"
>>
>
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254733744121/+254722743223
> "I can't hear you -- I'm using the scrambler."
>