Ipfw rule to forward all traffic through a local proxy

http-proxyipfw

I want to set up a local http proxy for testing and stubbing apps that make external api calls over http.

I'm not sure the best way to do this with ipfw, I want to run my proxy as a particular user, then redirect all http traffic to this proxy, but I need to allow all http trafic from this user, what are the particular ipfw rules for this?

I am using OS X.

Best Answer

ipfw add 666 fwd 127.0.0.1,80 tcp from me to any 80 not uid user_proxy

This should theoretically forward locally generated traffic directed at some port 80 to localhost:80, where the proxy is running under the user_proxy user. I have no idea why this doesn't work. On my system the machine just dies after I do it (OS X 10.8). Did you manage to solve your problem?

Related Solutions

How to set up RouterOS to use web proxy on another machine

No need of setting proxy in RouterOS. You can route all outgoing HTTP traffic to the server directly thru NAT:

ip firewall nat add in-interface=eth1 src-address=!<IP of Squid machine> dst-port=80 protocol=tcp action=dst-nat to-addresses=<IP of Squid machine> to-ports=8080

The last parameter "src-address=!..." is needed in case which squid machine communicates thru same interface as the other machines. Otherwise it would go like this:

Computer sends HTTP request
RouterOS destinates this packet to squid
Squid sends HTTP request to webserver
RouterOS destinates squid request again to squid -> loop

Iptables – Forwarding Http traffic through another machine in the LAN

Why don't you try SSH tunneling since you mentioned you have access to another machine which has proper access to internet

Option 1:

ssh and direct connect (SOCKS5) : The following line will start the ssh client and connect to username@remote_machine.com. Port 8080 on localhost (127.0.0.1) will listen for requests and send them to the remote machine. The remote machine will then send the packets out as if they originated from itself. Now all you have to do is set the preference in Firefox/chrome/your browser choice to use a SOCKS proxy. The proxy is, of course, “localhost”, with the port 8080.

ssh -C2qTnN -D 8080 username@remote_machine.com

Option 2:

ssh to squid proxy (HTTP/SSL Proxy) : The following line will also start the ssh client and connect to username@remote_machine.com. Port 8080 on localhost (127.0.0.1) on the current machine will listen for requests and ssh tunnel them to the remote machine. On the remote machine ssh will forward the packets to localhost port 3128. If squid is listening on localhost port 3128 on the remote machine then all requests sent though the ssh tunnel will then be forwarded to squid.

ssh -C2qTnN -L 8080:localhost:3128 username@remote_machine.com

Best Answer

Related Solutions

How to set up RouterOS to use web proxy on another machine

Iptables – Forwarding Http traffic through another machine in the LAN

Related Topic