squid, cisco a transparentni proxy - nechodi :-/

[Miroslav Pragl]

Zdravim!
Mam problemy s transparentnim proxy (squid + Cisco):
squid mi posloucha na 80 a 3128 a snad je nastaven OK:
------------------------------------------------------

http_port 3128
http_port 80
...
httpd_accel_host        virtual
httpd_accel_port        80
httpd_accel_with_proxy  on
httpd_accel_uses_host_header on

(telnet na port 80 squidu funguje, i z cisca)


Cisco mam nastaveno takto:
--------------------------
interface Ethernet1
 description connected to 192.168.1.0 (Intranet)
 ip address 192.168.1.254 255.255.255.0
 ip access-group 110 in
 ip nat inside
 ip policy route-map proxy-redir <--

route-map proxy-redir permit 10
 match ip address 120
 set ip next-hop 192.168.1.9

access-list 120 deny   tcp any any neq www
access-list 120 deny   tcp host 192.168.1.9 any eq www (192.168.1.9 je
SQUID)
access-list 120 permit tcp any any

nicmene jedine, ceho jsem dokazal je, ze mi cisco blokuje veskery odchozi
traffic na port 80 krome toho ze squida. o reroutingu se mi muze leda zdat.

Predpokladam, ze jsou zde znalci squidu i cisca - nejake nakopnuti, prosim?

Dekuji

MP