My router (runnin F9) was acting as transparent proxy.... This morning when connecting my Skype fon it didn't connect!!! well I connected my laptop and I was not able to surf the net, to read e-mails. I was surprised because It worked fine since a long time. My router has two NIC's, from the laptop I could not ping my modem!! I mad ethe following tests: I connected Firefox by Squid (and it was o.k.) I disabled the forward HTTP connections to Squid Proxy putting a # in front of line -A PREROUTING -p tcp -m tcp -i eth0 --dport 80 -j REDIRECT --to-ports 3128 What is wrong (iptables or squid)??? iptables-1.3.8-6.fc9 squid-3.0.STABLE1-3.fc9 I think squid as latest release was installed two days ago, while iptables is much older. As attachment you will find my squid.conf file # Generated by iptables-save v1.3.8 on Sun Nov 11 10:15:45 2007 *nat :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 192.168.0.0/24 -o ppp0 -j MASQUERADE # Forward HTTP connections to Squid proxy -A PREROUTING -p tcp -m tcp -i eth0 --dport 80 -j REDIRECT --to-ports 3128 COMMIT # Completed on Sun Nov 11 10:15:45 2007 # Generated by iptables-save v1.3.8 on Sun Nov 11 10:15:45 2007 *mangle :PREROUTING ACCEPT [138:11158] :INPUT ACCEPT [50:6740] :FORWARD ACCEPT [88:4418] :OUTPUT ACCEPT [41:6038] :POSTROUTING ACCEPT [129:10456] COMMIT # Completed on Sun Nov 11 10:15:45 2007 # Generated by iptables-save v1.3.8 on Sun Nov 11 10:15:45 2007 *filter #Originale #:INPUT ACCEPT [50:6740] #:FORWARD ACCEPT [90:4518] #:OUTPUT ACCEPT [41:6038] #COMMIT #fine originale #inizio prova :FORWARD DROP [0:0] :INPUT DROP [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth0 -j ACCEPT -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -i eth0 -j ACCEPT COMMIT #fine prova # Completed on Sun Nov 11 10:15:45 2007 -- Antonio Montagnani Skype : antoniomontag
Attachment:
squid.conf
Description: application/extension-conf
-- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
