[LEDE-DEV] transparent proxy firewall redirect kills Luci interface

[Brian J. Murrell]

Hi.

Using LEDE 17.01.4, if I add the prescribed transparent proxy
configuration for the firewall per:

https://wiki.openwrt.org/doc/uci/firewall#transparent_proxy_rule_external

config redirect
        option src              lan
        option proto            tcp
        option src_ip           !192.168.1.100
        option src_dport        80
        option dest_ip          192.168.1.100
        option dest_port        3128
        option target           DNAT

config redirect
        option dest             lan
        option proto            tcp
        option src_dip          192.168.1.1
        option dest_ip          192.168.1.100
        option dest_port        3128
        option target           SNAT

The Luci web interface then no longer works, presumably because it is
also on port 80 and traffic to it is being captured by the above?

Any ideas on how to resolve, other than to change the port of the Luci
interface?

Cheers,
b.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.infradead.org/pipermail/lede-dev/attachments/20171030/581c8082/attachment.sig>