Ipfw :-)

[netolinux]

Ola amigos estou com um problema, habilitei o IPFIREWALL/NAT coloquei as alterações necessárias no /etc/rc.conf, compilei o Kernel direitim!! Quando digitei o ipfw list apareceram as seguintes regras:

00050 divert 8668 ip from any to any via vr0
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.1/8
00300 deny ip from 127.0.0.1/8 to any
65000 allow ip from any to any
65535 allo ip from any to any

Ate ai tudo bem, os clientes navegam. Mas quando coloco a seguinte regra:
/sbin/ipfw add 00101 fwd 127.0.0.1,3128 tcp from 192.168.0.0.24 to any dst-port 80
os clientes não conseguem navegar, oq será q esta contecendo?!! estou usando o FreeBSD 6.1 + Squid!! Desde jah obrigado!!

[1c3m4n]

provavelmente algo no teu squid.... ele ta configurado como proxy transparente? nao adianta soh fazer o redir das portas, tem que configurar o squid pra trabalhar como transparente tb.

[netolinux]

Ae galera ta ai meu squid.conf p/ voces darem uma analisada!

Arquivo de configuracao do squid
http_port 192.168.0.1:3128
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin\?
cache_mem 85 MB
ipcache_size 2048
fqdncache_size 2048
cache_effective_user squid
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_dir ufs /squid 2000 32 512
cache_access_log /usr/local/etc/squid/loogs.log
dns_nameservers 201.16.39.1
dns_nameservers 201.16.39.2
#ACLS
acl rejeitar url_regex -i "/usr/local/etc/squid/ACL/palavras_negadas"
acl bloquear_dominios dstdomain -i "/usr/local/etc/squid/ACL/dominios_proibidos"
acl redelocal src 192.168.0.0/24
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443
acl Safe_ports port 80
acl Safe_ports port 21
acl Safe_ports port 443 563
acl Safe_ports port 70
acl Safe_ports port 210
acl Safe_ports port 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
#Secao http_access
http_access deny rejeitar
http_access deny bloquear_dominios
http_access allow redelocal
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#
visible_hostname rbl.local
http_access deny all
error_directory /usr/local/etc/squid/errors/Portuguese
coredump_dir none