[KLUG Members] squid and transparent proxy

[komal]

----- Original Message -----
From: "Adam Tauno Williams" <awilliam at whitemice.org>
To: "The main KLUG mailing list." <members at kalamazoolinux.org>
Sent: Saturday, January 29, 2005 9:46 PM
Subject: Re: [KLUG Members] squid and transparent proxy


> > > I'd wager DNS isn't working for some reason.  Make sure it is working
on
> > both
> > > the proxy/firewall and the workstation.
> > > TEST IT ON THE COMMAND LINE.  IE's error messages are totally,
absolutely,
> > > completely, and utterly useless.
> > > Use "nslookup" on m$-windblowsitdown and "host" on the Linux box.
> > I am using private ip address in local lan. My proxy server is using two
lan
> > cards one connected to public interface and other connected to pirvate
> > interface. I am using isp dns servers. I have enable ip forwarding. I am
> > using private ip address of proxy server as a default gateway.
>
> If nat is enabled it seems like it should work.  Test it, on the server,
> then on the client.

What nat rule i should enter on server?

iptables -t nat -A POSTROUTING -o eth0 -j MASQURADE .Would't this masquerade
all trafice?

>
> > Is this
> > enough to resove hostname to ip address or i need to enable more?
>
> ? Does nslookup work on the workstation?  If yes, then yes, If not, then
> no.
>
> You entered the ISP's DNS servers into the workstation's configuration?

Yes. I am not running loal DNS server.