Re: bridging plus caching using squid

["Gabriel Orozco" <gabriel_orozco () mx sumida com>]

What you need is to implement NAT in your linux box, and from there,
transparently redirect the web traffic to squid and the rest to the web.

it's as simple as making all computers gateway point to the linux box ip and
setup NAT in your linux box.


----- Original Message -----
From: "Shankara Narayanan" <ssn () zeeaccess com>
To: "Security-Basics" <security-basics () securityfocus com>
Sent: Tuesday, August 05, 2003 8:34 AM
Subject: bridging plus caching using squid


> Hi list,
>
> Trying put place a caching box to save my bandwidth, parallely need to
build
> a bridge on the same system. (it is an ISP setup)
> The purpose of bridging is , I have lots of customer behind my squid, so I
> need the packets to take there own IP address to the internet and not my
> caching machine(A.B.C.D) IP.
>
> problems that I am facing
> 1) if bridge is working , caching is not & vice versa.
> 2) when  I do ifconfig eth1 0.0.0.0 , it gives an error output  "setting
> promiscuous mode"
> 3) br0 (name I have given to the bridge) is taking the mac add of eth0 and
> not eth1 ( is there any specific reason for that ?)
>
> /sbin/ifconfig -- output
>
> br0       Link encap:Ethernet  HWaddr 00:06:29:57:0C:F0
>           inet addr:A.B.C.D  Bcast:A.B.C.255  Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:78473 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:58027 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0
>           RX bytes:12202035 (11.6 Mb)  TX bytes:13442671 (12.8 Mb)
>
> eth0      Link encap:Ethernet  HWaddr 00:06:29:57:0C:F0
>           UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
>           RX packets:112295 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:63939 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:100
>           RX bytes:16444667 (15.6 Mb)  TX bytes:14556011 (13.8 Mb)
>           Interrupt:10 Base address:0x2180
>
> eth1      Link encap:Ethernet  HWaddr 00:50:DA:91:E2:43
>           UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:24561 errors:0 dropped:0 overruns:0 carrier:24561
>           collisions:0 txqueuelen:100
>           RX bytes:0 (0.0 b)  TX bytes:2172223 (2.0 Mb)
>           Interrupt:11 Base address:0x4b00
>
> lo        Link encap:Local Loopback
>           inet addr:127.0.0.1  Mask:255.0.0.0
>           UP LOOPBACK RUNNING  MTU:16436  Metric:1
>           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:0
>           RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
>
> commands used to iniciate bridging.
> ifconfig eth0 0.0.0.0
> ifconfig eth1 0.0.0.0
> brctl addbr br0
> brctl addif br0 eth0
> brctl addif br0 eth1
> ifconfig br0 A.B.C.D netmask A.B.C.0 up
>
> Modules Installed
> bridge-utils-devel-0.9.3-6
> bridge-utils-0.9.3-4
>
> Help required for the following,
> 1) what mistake I am doing in the whole process ?
> 2) am I doing any think silly ?
> 3) websites that gives me clear info of the methods to be used for the
same.
> Thanks in advance.
>
> Regards,
> Shankar.
>
>
>
> --
> Outgoing mail is certified Virus Free.
> Checked by AVG Anti-Virus (http://www.grisoft.com).
> Version: 7.0.150 / Virus Database: 259.9.6 - Release Date: 8/4/03


----------------------------------------------------------------------------
----


> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.507 / Virus Database: 304 - Release Date: 04/08/2003


---------------------------------------------------------------------------
----------------------------------------------------------------------------