On Mon, Nov 22, 2004 at 02:41:57AM -0800, Nilesh wrote:
> Hello All,
>
> I am using Squid proxy and IPtables. I am having some
> problems to configure firewall.
> The problem is SNAT rule If I put rule in script I am
> able to connect VPN server at outside world but could
> not block yahoo messengers by squid without SNAT rule
> I can block messenger through squid.
> I have checked VPN connection properties there is
> check box IPsec through NAT mode . If I uncheck I wont
> able to connect
> SNAT Rule
> $IPTABLES -t nat -A POSTROUTING -o $EXTIF -j SNAT --to
> $EXTIP
if you only need SNAT for VPN traffic, how about just SNAT-ing traffic
destined for the VPN server?
$IPTABLES -t nat -A POSTROUTING -o $EXTIF -d $VPN_SRV \
-j SNAT --to $EXTIP
-j
--
"Do you want to change your name to Homer Junior? The kids can call
you Hoju!"
--The Simpsons
