On Tue, May 17, 2005 at 01:30:58PM +0300, Wennie V. Lagmay wrote:
> Our ISP's Proxy server is proxy.ISP.net , our company's own proxy server is
> proxy.ourcompany.net. Our own proxy server has delay_pool but our ISP proxy
> server dont have. I want to control our client to use only our company
> proxy server. how can I block the proxy.ISP.net using IP tables so that
> every body can be force to use our compnay proxy server. (note that our
> company proxy server is connected to our ISP proxy server as cache_peer
> parent)
assuming your company proxy server is on a different machine than the
firewall:
iptables -A FORWARD -p tcp --syn -s proxy.ourcompany.net \
-d proxy.ISP.net --dport $PROXY_PORT -j ACCEPT
# assuming your internal machines are allowed unfettered access
# to the internet
iptables -A FORWARD -p tcp --syn -d proxy.ISP.net -j DROP
-j
--
"Guy on Street #2: It's 3:00. Where the hell is Louie?
Guy on Street #1: Well, you tell me. Louie left his house at 2:15 and
had to travel a distance 6.2 miles traveling at a rate of five miles a
hour. When will Louie get here?
Guy On Street #2: Depends if he stops to see his ho.
Guy on Street #1: That's what we call a "variable"."
--Family Guy
