How do I build a transparent proxy using squid and iptables?
First, of course, you need a suitable DNAT or REDIRECT rule. Use REDIRECT only if squid is running on the NAT box itself. Example: iptables -t nat -A PREROUTING -p tcp –dport 80 -j DNAT –to 192.168.22.33:3128 After that, you have to configure squid appropriately. We can only give short notes here, please refer to the squid documentation for further details. The squid.conf for Squid 2.3 needs to be something like the following: http_port 3128 httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on Squid 2.
