Hello! I'm using iptables v1.2.11 with kernel 2.4.26 at RH8. Also there is squid-cache 2.5.STABLE1 listening at port 3128. They works as transparent proxy gateway for small office: []# iptables -A PREROUTING -t nat -i LAN -p tcp --dport 80 -j REDIRECT --to-port 3128 to manage and account data going to 80 port I did something like this: []# iptables -A PREROUTING -t mangle -i LAN -p tcp --dport 80 -j LOG the question is: how can I manage packets incoming from 80 port to my LAN? All chains and tables(OUTPUT:mangle,nat,filter and POSTROUTING:mangle,nat) shows that one go from local_ip_of_gateway:3128. But tcpdump started at LAN interface shows that packets go from real ip addresses and src_port 80.... In what chain and table netfilter replaces SRC_ip & SRC_port back by real? Thank you! -- Best regards, Sergeyev , Moscow RU mailto:serg@xxxxxxxx
