Re: will port forwarding work here?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, January 14, 2005 10:35 am, Payal Rathod said:
> Hi,

Hi!

> Is it possible to write some kind of rule on 192.168.0.10 which will
> *properly* redirect traffic from 192.168.0.10:3128 to
> 192.168.0.11:3128 for those clients.  A friend on chat suggested (he
> was not sure),
>
> iptables -A PREROUTING -t nat -s 192.168.0.10 --dport 3128 \
>  -j DNAT --to-destination 192.168.0.11
>
> Is there anything else missing?

Yes, see NATing on the same network from the Rusty's NAT howto.

Also, please note this will broke HTTP 1.0 which really hates NAT.

What I suggest is configuring both squid in HTTP accel mode (transparent)
and unconfigure your client's browser so they attempt to reach the
world wide web by themself.

Then, make your router silently redirecting packets to whatever the squid
you want.

Read http://www.tldp.org/HOWTO/TransparentProxy.html
Chapter 6 is what you need, I guess.

>
> With warm regards,
> -Payal
>

HTH,

Samuel





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux