OpenForum RSS: FreeBSD, squid & TPROXY

FreeBSD, squid & TPROXY (Alexander Sheiko)

Tue, 26 May 2015 22:04:24 GMT

> � � ��.�� . �� . ��-�� ?

�� HTTP ��, �� ? �� .

�� ?

��. http://adsh.org.ua/blog/article/52/

FreeBSD, squid & TPROXY (Mackfh)

Tue, 26 May 2015 14:22:13 GMT

> �� , ��!
> �� . �� :
> �� FreeBSD 10.1 � �� , ��
> �� . �� . �� - � ��, ��
> �&� ��. �� 3.5.4 � �� TPROXY. ��
> �� HTTP-��.
> �� , �� : http://www.opennet.ru/openforum/vsluhforumID12/7113.html
> ��, ��, �� ? �� ipfw �� ,
> �� .

�� . �� :

#!/bin/sh
kldload -v ng_ether
kldload -v ng_bpf
kldload -v ng_eiface
ngctl mkpeer bge0: bpf lower bge0-lower
ngctl name bge0:lower br-bpf
ngctl connect bge0: br-bpf: upper bge0-upper
ngctl connect bge1: br-bpf: lower bge1-lower
ngctl connect bge1: br-bpf: upper bge1-upper
ngctl mkpeer br-bpf: eiface squid ether

PATTERN="tcp dst port 80"
INHOOK="bge0-low

FreeBSD, squid & TPROXY (Mackfh)

Tue, 26 May 2015 10:45:05 GMT

>> � ��
>> ��
> � �� . �� , �� ӣ ��
> ��.

��. �� :

01100 0 0 fwd 127.0.0.1,8080 log logamount 50 tcp from 192.168.1.10 to any dst-port 80 in via bridge0
01101 0 0 fwd 127.0.0.1 log logamount 50 tcp from any 80 to 192.168.1.10 in via bridge0

FreeBSD, squid & TPROXY (Alexander Sheiko)

Fri, 22 May 2015 10:24:44 GMT

> � ��
> ��

� �� . �� , �� ӣ �� .

FreeBSD, squid & TPROXY (Mackfh)

Fri, 22 May 2015 06:59:40 GMT

>> � �� . �� , �� squid � intercept �
>> �� pf - �� .
> �� :
> http://rejik.ru/bb_rus/viewtopic.php?f=1&t=903#p4657
> ��-�� . ��
> �� in / out.

��! �� TPROXY �� . � ��

# Default rule to transparent proxy
${fwcmd} add 020 fwd 127.0.0.1,3128 tcp from any to not me 80 in via ${if}
# Catch the packets that come back using the clients IPs
${fwcmd} add 030 fwd 127.0.0.1,3128 tcp from not me 80 to any in via ${if}

��

01100 19 1239 fwd 127.0.0.1,8080 log logamount 50 ip from 192.168.1.10 to any dst-port 80 via bridge0
01101 71 105027 fwd 127.0.0.1 log logamount 50 ip from any 80 to 192.168.1.10 via bridge0

�� .

FreeBSD, squid & TPROXY (Alexander Sheiko)

Fri, 22 May 2015 00:18:01 GMT

> � �� . �� , �� squid � intercept �
> �� pf - �� .

�� :

http://rejik.ru/bb_rus/viewtopic.php?f=1&t=903#p4657

��-�� . �� in / out.

FreeBSD, squid & TPROXY (Mackfh)

Thu, 21 May 2015 20:44:16 GMT

>> � �� , �� . �� , ��
>> ��.
> ��. ��, �� - ��
> �� FreeBSD � �� (�� tproxy) ��. ��
> �� (�� Squid) � ��
> �� (�� ). �� .

� �� . �� , �� squid � intercept � �� pf - �� .

FreeBSD, squid & TPROXY (Alexander Sheiko)

Thu, 21 May 2015 12:18:47 GMT

> � �� , �� . �� , ��
> ��.

��. ��, �� - �� FreeBSD � �� (�� tproxy) ��. �� (�� Squid) � �� (�� ). �� .

FreeBSD, squid & TPROXY (Mackfh)

Thu, 21 May 2015 05:52:41 GMT

>> �� , ��, � ��, �� . ��
>> �� , �� - �� ,
>> ��
> �� . �� ? �.�. - ��
> �� .
> � gateway � �� ޣ�?

� �� , �� . �� , �� .

�� 3 ��:
Internet:
Destination Gateway Flags Netif Expire
default 10.16.0.1 UGS bge3

�� , �� - �� .