[Chilli] Squid transparent proxy on same server

[Jason Allen]

On Wed, Apr 14, 2010 at 14:42, Isidor Zeuner <chilli at quidecco.de> wrote:

> Hi Jason,
>
> >
> > Can anyone share configuration settings (or point me towards and article
> or
> > how-to), with regard to iptable rules, to ensure that port 80 traffic is
> > transparently routed through to squid? I'd need to ensure that port 80
> > traffic to the server itself is still available as the server runs apache
> > for teh charging portal.
> >
>
> The HS_POSTAUTH_PROXY and HS_POSTAUTH_PROXYPORT configuration settings
> are there to configure a transparent proxy to handle requests after
> the user is authenticated. This is handled through chilli, not
> iptables, and does not prevent you from still running a web server.
>
> Best regards,
>
> Isidor
>

For the information of other (potential) users, I have not been able to get
this successfully work with the Squid proxy on the same server as chilli
(ie. HS_POSTAUTH_PROXY = 127.0.0.1). I have confirmed, via lynx, that squid
works fine for localhost/127.0.0.1 connections, but it does not work through
chilli for chilli authenticated clients.

Debug logs showed redirection to squid, but according to squid logs it
(squid) was not receiving the request.

Unfortunately, I'm not development minded enough to know what the problem is
or might be. If anyone has it working in this scenario, I would like to hear
from you if your willing to provide some advice on your configuration.


Thanks.

-- 
Cheers,
Jason
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.coova.org/pipermail/chilli/attachments/20100420/21d385e6/attachment.htm>