Transparent firewall rule redirect question.


  • This is somewhat of a continuation from another post I made earlier.  But, I'm trying to figure it from another angle.
    Original post: http://forum.pfsense.org/index.php/topic,20890.0.html

    I have pfSense working as a transparent firewall, but I would like to add a web proxy to it.  So, since the squid proxy doesn't return anything as soon as I make it transparent, I figured I'd see if I could create the same rules it does and just redirect the traffic manually.  Here's the redirect rules it creates (em0=LAN):

    rdr on em0 inet proto tcp from any to ! (em0) port = http -> 127.0.0.1 port 80
    pass in quick on em0 proto tcp from any to ! (em0) port = http flags S/SA keep state
    pass in quick on em0 proto tcp from any to ! (em0) port = 3128 flags S/SA keep state

    So, how would I create this in the rules myself and test if it's the redirect that's the problem or the proxy itself?