> > Hi All, > > I have server, that connects my localnet to inet, clients connects to me > > via PPPoE (ppp[1-9]). I want to run squid on localhost and I want my > > clients to connect to it. > > > > Can somebody help me with redirect rules? > > > > > > > > Igor Popov <igorpopov@xxxxxxxxxx> > > icq 241601876 > iptables -t nat -A PREROUTING -i "name of interface" -p tcp -m tcp -- > dport 80 -j REDIRECT --to-ports 3129 > > If your default policy is to DROP all INPUT/FORWARD as is it should be. > > > iptables -A INPUT -i "name of interface" -p tcp -m tcp --dport 80 -j > ACCEPT > As I know, REDIRECT target redirects to the same iface, but on another port. I can run squid on ppp iface, because it is created dynamically and I don't want it to listen on all addresses. I have tried to use REDIRECT and DNAT, but without any success. Now I have created alias for eth0 with ip that lies in the same subnet as ppp[1-9] and run squid on it. May be my problem in antispoofing filter? -- "You have been in Afghanistan, I perceive." -- Sir Arthur Conan Doyle, "A Study in Scarlet"