-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ankush Grover wrote: > hey friends, > > I want to configure transparent proxy on squid for my company on FC3. > For time being I am testing the configuration on the test machines. > The testing machines consists of a laptop on which Windows 98 is > running and a machine on which FC3 is running with 2 Lan Cards. > > The ipaddresses of the LAN cards are > > eth0: 192.168.1.129 subnetmask 255.255.255.0 > eth1: 192.168.1.130 subnetmask 255.255.255.0 > > Windows 98 machine is having only one LAN Card > > eth0: 192.168.1.151 subnetmask 255.255.255.0 > > Windows 98 (eth0) and FC3 (eth1) are connected to each other through > cross cable and the FC3 eth0 is connected to the rest of the network > of the company. > > Now the problem is that both the PCs are not able to ping each other > (Windows 98 & FC3). But If I disable eth0 on FC3 then both are able to > ping each other but not when eth0 is active on FC3. I have defined > GATEWAY=192.168.1.110 under /etc/sysconfig/network. > SELinux is off on FC3 and iptables are also not configured. > > Please guide me how to configure networking between FC3 and Windows 98. > > Thanks & Regards > > Ankush Grover > Ankush, Your FC3 system is configured incorrectly with the rest of your network. Firstly, both of your FC3 network cards are on the same subnet (192.168.1/24), so they won't route anything; hence the erratic network behavior. Your default gateway (192.168.1.110) is connected to your FC3 eth0. As far as the FC3 system is concerned, it will send all data out of the eth0 NIC, so all ping requests/responses are not being sent to your Win98 box. That's why it only works when you disable the FC3 eth1 interface (they are both on the same network, that's bad). If you want your FC3 system to act as a router (or transparent proxy), then change: FC3 eth1 --> 192.168.2. something W98 eth0 --> 192.168.2. something else Subnet: 255.255.255.0 (W98 box needs to point to FC3 eth1 as it's default gateway.) Then enable packet forwarding... echo 1 > /proc/sys/net/ipv4/ip_forward However, if you want to configure transparent proxy, you don't need to enable port forwarding, you need to redirect all outbound HTTP requests to the Squid port. This can be done with a simple iptables rule on your FC3 box: iptables -t nat -A PREROUTING -i eth1 -s 192.168.2.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128 Checkout the Linux Home Server HOWTO at http://www.brennan.id.au, it covers all of this. HTH Regards, Miles Brennan -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEskH9cSPa0xQu/fARAu17AJ0cBiXp9/+E0aBmeEN2W+9oZszcDACgnyK5 5mh+8VdnKf4toLTczHaOYeQ= =ru1Z -----END PGP SIGNATURE-----
