Народ, подскажите пожалуйста, почему не работает pf+прозрачный squid. Если сквид прописать в браузере - все пашет, если как прозрачный - говорит что «invalid URL»
freebsd-1608# head -n40 /etc/pf.conf | tail -n17
proxy_server="{192.168.41.1}"
nat on $ext_if from $lan to any -> $ext_if
rdr on $int_if inet proto tcp from $lan to any port www -> $proxy_server port 3128
cat /usr/local/etc/squid/squid.conf
auth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 5
auth_param ntlm keep_alive on
auth_param basic program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off
acl authenticated proxy_auth REQUIRED
http_port 192.168.41.1:3128 transparent
icp_port 0
acl localhost src 192.168.41.0/24
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 384 MB
maximum_object_size 64 MB
cache_dir ufs /usr/local/cache/squid/ 512 32 512
http_access allow authenticated
coredump_dir /usr/local/squid/cache
access_log /usr/local/squid/logs/access.log squid
visible_hostname al
acl_uses_indirect_client on
delay_pool_uses_indirect_client on
log_uses_indirect_client on
freebsd-1608# squid -v
Squid Cache: Version 3.1.11
configure options: '--with-default-user=squid' '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/var/squid' '--sysconfdir=/usr/local/etc/squid' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid/squid.pid' '--enable-removal-policies=lru heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--disable-translation' '--enable-auth=basic digest negotiate ntlm' '--enable-basic-auth-helpers=DB NCSA PAM MSNT SMB squid_radius_auth LDAP YP' '--enable-digest-auth-helpers=password ldap' '--enable-external-acl-helpers=ip_user session unix_group wbinfo_group ldap_group' '--enable-ntlm-auth-helpers=smb_lm' '--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-storeio=ufs diskd aufs' '--enable-disk-io=AIO Blocking DiskDaemon DiskThreads' '--enable-delay-pools' '--enable-ssl' '--with-openssl=/usr' '--enable-cache-digests' '--enable-wccpv2' '--disable-ident-lookups' '--enable-useragent-log' '--enable-pf-transparent' '--disable-ecap' '--disable-loadable-modules' '--enable-kqueue' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd8.2' 'build_alias=i386-portbld-freebsd8.2' 'CC=cc' 'CFLAGS=-O2 -pipe -I/usr/local/include -I/usr/include -DLDAP_DEPRECATED -fno-strict-aliasing' 'LDFLAGS= -L/usr/local/lib -rpath=/usr/lib:/usr/local/lib -L/usr/lib' 'CPPFLAGS=' 'CXX=c++' 'CXXFLAGS=-O2 -pipe -I/usr/local/include -I/usr/include -DLDAP_DEPRECATED -fno-strict-aliasing' 'CPP=cpp' --with-squid=/usr/ports/www/squid31/work/squid-3.1.11 --enable-ltdl-convenience
