Re: [squid-users] Mikrotik and Squid Transparent

2015-07-11 Thread Marcel
Hi Dalmar one question how many interfaces do your squid box have ? El 28/6/15 a las 11:26, Dalmar escribió: To begin with, thank you Marcel,Alex and Amos for your help guys i am really so close because of you. I have done exactly what Marcel told me and now all transparent/intercept errors ar

[squid-users] Mikrotik and Squid Transparent

2015-07-11 Thread Dalmar
To begin with, thank you Marcel,Alex and Amos for your help guys i am really so close because of you. I have done exactly what Marcel told me and now all transparent/intercept errors are gone. It worked nicely when i used two mikrotiks one for WAN and the other for the LAN connection, however, when

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-28 Thread Amos Jeffries
On 29/06/2015 11:28 a.m., Alex Samad wrote: > Hi > > Thought I would re word what i got from this, see if I understood. > > If squid and router (default gateway) are on the same box > then > DNAT to the SQUID listening port and local ip (Can you use localhost > suppose it doesn't matter) localho

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-28 Thread Alex Samad
Hi Thought I would re word what i got from this, see if I understood. If squid and router (default gateway) are on the same box then DNAT to the SQUID listening port and local ip (Can you use localhost suppose it doesn't matter) else router the packet to the SQUID box (if possible) DNAT on the SQ

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-28 Thread Amos Jeffries
On 28/06/2015 10:37 p.m., Dalmar wrote: > To begin with, thank you Marcel,Alex and Amos for your help guys i am > really so close because of you. I have done exactly what Marcel told me and > now all transparent/intercept errors are gone. It worked nicely when i used > two mikrotiks one for WAN and

[squid-users] Mikrotik and Squid Transparent

2015-06-28 Thread Dalmar
To begin with, thank you Marcel,Alex and Amos for your help guys i am really so close because of you. I have done exactly what Marcel told me and now all transparent/intercept errors are gone. It worked nicely when i used two mikrotiks one for WAN and the other for the LAN connection, however, when

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-27 Thread Alex Samad
On 27 June 2015 at 16:33, Amos Jeffries wrote: > On 27/06/2015 10:02 a.m., Alex Samad wrote: >> Hi >> >> Sorry missing something here. >> >> I thought this was a mikrotek rtr , presumably acting as a default >> gateway for the local lan to the internet. >> it has a DNAT rule to capture all interne

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-26 Thread Amos Jeffries
On 27/06/2015 10:02 a.m., Alex Samad wrote: > Hi > > Sorry missing something here. > > I thought this was a mikrotek rtr , presumably acting as a default > gateway for the local lan to the internet. > it has a DNAT rule to capture all internet traffic that is port 80 > (and presumably at some poi

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-26 Thread Alex Samad
Hi Sorry missing something here. I thought this was a mikrotek rtr , presumably acting as a default gateway for the local lan to the internet. it has a DNAT rule to capture all internet traffic that is port 80 (and presumably at some point in time port 443) and it DNATS it to the SQUID box. and

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-26 Thread Amos Jeffries
On 27/06/2015 12:14 a.m., Alex Samad wrote: > aren't squid and nat box different ? that was my presumption.. > Best not to. The dst-IP:port on the TCP packets entering the Squid machine is where Squid will send the outgoing server requests. If that dst-IP is the IP of the Squid machine itself yo

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-26 Thread Alex Samad
aren't squid and nat box different ? that was my presumption.. On 25 June 2015 at 19:07, Amos Jeffries wrote: > On 25/06/2015 12:45 p.m., Alex Samad wrote: >> Hi >> >> why this, doesn't this block all traffic getting to the squid port. >> iptables -t mangle -A PREROUTING -p tcp --dport $SQUIDPORT

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-25 Thread Amos Jeffries
On 25/06/2015 12:45 p.m., Alex Samad wrote: > Hi > > why this, doesn't this block all traffic getting to the squid port. > iptables -t mangle -A PREROUTING -p tcp --dport $SQUIDPORT -j DROP All external traffic yes. The NAT interception happens afterward and works. The point is that NAT intercep

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-24 Thread Alex Samad
Hi why this, doesn't this block all traffic getting to the squid port. iptables -t mangle -A PREROUTING -p tcp --dport $SQUIDPORT -j DROP what I would do to test is run tcpdump on the squid box and capture all traffic coming to it on the squid listening port, then go to a test machine on the eth

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-24 Thread Dalmar
squid 3.3.8 and ubuntu 15.04 server 2015-06-24 15:04 GMT+03:00 Yuri Voinov : > Squid 3.5.x? > > 24.06.15 18:03, Dalmar пишет: > > Hi, > For over two weeks i am having a really headache in configuring squid > transparent/intercept. > I have tried different options and configurations but i couldn

Re: [squid-users] Mikrotik and Squid Transparent

2015-06-24 Thread Yuri Voinov
Squid 3.5.x? 24.06.15 18:03, Dalmar пишет: Hi, For over two weeks i am having a really headache in configuring squid transparent/intercept. I have tried different options and configurations but i couldn't get it to work. i think the problems lies in the Iptables / NAT but i really couldn't so

[squid-users] Mikrotik and Squid Transparent

2015-06-24 Thread Dalmar
Hi, For over two weeks i am having a really headache in configuring squid transparent/intercept. I have tried different options and configurations but i couldn't get it to work. i think the problems lies in the Iptables / NAT but i really couldn't solve it. I have tried different iptable rules incl