>>> Со всем этим богатством столкнулся первый раз, гуглить и читать форумы пробовал
>>> - ответа найти не смог. Надеюсь хоть здесь кто-нибудь сможет помочь.
>> неправильно значит пробовал
>> http://wiki.squid-cache.org/ConfigExamples/Intercept/OpenBsdPf
> ЗЫ PF offers a rdr-to option. However this not supported with any
> Squid. Use divert-to instead.ОС freeBSD. Для нее в мане ( http://wiki.squid-cache.org/ConfigExamples/Intercept/FreeBsd... ) написано по-другому:
#set skip on $int_if << These lines commented out
#set skip on $wi_if
# redirect only IPv4 web traffic to squid
rdr pass inet proto tcp from 192.168.231.0/24 to any port 80 -> 192.168.231.1 port 3129
block in
pass in quick on $int_if
pass in quick on $wi_if
pass out keep state
###########
Сделал как в мане - ситуация не поменялась. Ниже обновленный конфиг PF^
###########
logopt = "log"
ext_if = "em0"
lan_if = "em1"
pubserv = "{ 22, 443 }"
lanserv = "{ 22, 53, 67, 80, 443 }"
icmp_types = "echoreq"
lan_net = "{ 10.250.2.0/24, 10.250.1.0/24, 192.168.49.0/24, 192.168.50.0/24 }"
set block-policy return
set loginterface $ext_if
#set skip on lo0
#set skip on $lan_if
scrub out all random-id
# NAT
#nat on $lan_if from $lan_if:network to any -> ($ext_if)
#rdr
rdr pass inet proto tcp from $lan_net to any port 80 -> $lan_if port 3128
block in
pass in quick on $lan_if
block return-rst in $logopt on $ext_if proto tcp all
block return-icmp in $logopt on $ext_if proto udp all
block in $logopt on $ext_if proto icmp all
block out $logopt on $ext_if all
pass in quick on lo0 all
pass out quick on lo0 all
#block drop in $logopt quick on $ext_if from to any
#block drop out $logopt quick on $ext_if from any to
#antispoof for { $lan_if, $ext_if }
block return-rst out on $ext_if proto tcp all
block return-rst in on $ext_if proto tcp all
block return-icmp out on $ext_if proto udp all
block return-icmp in on $ext_if proto udp all
block in $logopt quick proto tcp flags FUP/WEUAPRSF
block in $logopt quick proto tcp flags WEUAPRSF/WEUAPRSF
block in $logopt quick proto tcp flags SRAFU/WEUAPRSF
block in $logopt quick proto tcp flags /WEUAPRSF
block in $logopt quick proto tcp flags SR/SR
block in $logopt quick proto tcp flags SF/SF
pass in inet proto icmp all icmp-type $icmp_types keep state
pass in on $ext_if inet proto tcp from any to any port $pubserv flags S/SA keep state
pass in on $lan_if inet proto {tcp udp} from $lan_net to any port $lanserv keep state
pass in from $lan_net to $lan_net keep state
pass out from $lan_net to $lan_net keep state
pass out from any to any keep state
