The situation is this: there is a router, 3 machines behind it, on one of them Debian, on which you need to raise a transparent Squid, Google only shows how to set up a squid on a machine that distributes the Internet itself, but the router gives me it. Please explain and help or point out the how-to manual.

    2 answers 2

    iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --destination-port 80 -j DNAT --to-destination 192.168.0.{ВАШ IP}:3128

    Then in the settings of the SQUIDs you need to configure port 3128 and ip, you will need to dance with the router itself ...

    It is necessary to figure out the route on port 80 as follows:

    Local PC ---> Router ---> PC with Proxy ---> Router ---> Internet. And it is even easier to raise the DNS on a wheelbarrow with a squid and register it with a gateway to all local machines. In this case, however, the Internet will be available only when the PC is turned on with a squid. On the other hand, if you make, as you put it, “transparent proxy”, then when the PC is turned off with a squid, the proxy will not work (logically, thanks to KEP). So I advise you to start the Internet through a machine with a proxy, set up iptables, bind9, apache2, a SCUL server and all the other delights (to the extent of its promiscuity).

    Ideally, the picture: INTERNET ---> Router (in the bridge or in the route with the overrun of ports on the gateway IP (PC with proxy)) ---> Gateway ---> Local PC (end user).

      Apparently, port forwarding to help. ) That is, we configure on the local PC, on the router (server) we forward the ports necessary for operation.