Re: redirecting on a local machine

["saspan" <saspan@web.de>]

From: "Pascal Hambourg" <pascal.mail@plouf.fr.eu.org>

> > iptables -t -nat -A OUTPUT -m owner ! --owner-uid squid -p tcp --dport 
> > 80 -j REDIRECT --to-destination 3128
> '--to-destination' is not a valid option for REDIRECT. The only valid 
> option is '--to-ports'.
Sorry, sure, that is what it actually looked like. 
I pasted the code quickly from my memory.
The rule I used was

iptables -t -nat -A OUTPUT -m owner ! --owner-uid squid -p tcp --dport 
80 -j REDIRECT --to-ports 3128
> > doesn't seem to work,
> That does not provide much info. Can you elaborate ?
The browser sends http-request, it is redirected to squid
and then network-timeout-error occurs in the browser .

> > cause a browser would not be expecting a reply 
> > from a transparent proxy when waiting for replies to its requests.
> Huh ?
See: 
The browser sends http-request to e.g. 99.9.9.9.1:80.
The request is redirected to proxy on 127.0.0.1:3128.
Browser waits for reply from 99.9.9.9:80.
Actually the reply will come from proxy on 127.0.0.1:3128.

Do you see the problem?

Regards

Sascha