Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using PRIVOXY as a transparent proxy on a Fedora Core 11 box. The machine has one interface (eth0) and here is the configuration of the network: - (connected to ISP) - (proxy) - DHCP server

I have set the default gateway option in DHCP to be so ALL TRAFFIC destined for SHOULD pass through it (and on it's way out to the internet.

Here is my problem.... How do I ensure that traffic that is coming in/out of the network follows the correct path and does not create weird routing issues. I see some delays when using the proxy, but when I do a "straight shot" out to the net by changing my default gateway, I see no delays.

Here is my current iptables conf file:

# Generated by iptables-save v1.4.3.1 on Fri Jul 30 17:02:45 2010
:PREROUTING ACCEPT [1565:151406]
:OUTPUT ACCEPT [768:48101]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080 
# Completed on Fri Jul 30 17:02:45 2010
# Generated by iptables-save v1.4.3.1 on Fri Jul 30 17:02:45 2010
:INPUT ACCEPT [12764:10577001]
:FORWARD ACCEPT [3755:525228]
:OUTPUT ACCEPT [14364:12738086]
-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT 

I know that I am missing something, I just don't know what... I think that I need to do something like:

-A POSTROUTING -i eth0 -o eth0 -d --SNAT
share|improve this question
up vote 0 down vote accepted

The default gateway on has to be, /proc/sys/net/ipv4/ip_forward must be 1 and not 0.

Also remember that privoxy is a proxy and it can add some delay.

share|improve this answer
My default gw is set to be on the proxy box: U 0 0 0 eth0 U 0 0 0 eth1 UG 0 0 0 eth0 And IP forwarding is turned on: root@proxy ~]# cat /proc/sys/net/ipv4/ip_forward 1 I know that pulling through a proxy is going to add delay, but it seems to be "unnaturally" slow – QWade Aug 2 '10 at 16:11
Isn't privoxy doing something weird, like running tor or something? – coredump Aug 2 '10 at 18:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.