On Tuesday 12 June 2007 13:44:07 Ian Moyce wrote: > On 12 Jun 2007, at 12:38, Ray Leach wrote: > > On Tuesday 12 June 2007 13:13:08 Ian Moyce wrote: > >> Hello, > >> > >> I am trying to set up transparent web proxy server, but from the > >> examples I have found on the web, I can not make it work. > >> > >> I am trying: > >> > >> iptables -A FORWARD -i vnet0 -o tun0 -p tcp -m state --state > >> ESTABLISHED,RELATED -j ACCEPT > >> iptables -t nat -A PREROUTING -i venet0 -p tcp --dport 80 -j REDIRECT > >> --to 8888 > >> > >> Where tun0 is the VPN port, vnet0 (its actually vnet0:0) is the > >> network interface. > >> > >> Squid is listening on localhost:8888 > >> > >> I get an error message when I run these 2 lines: > >> > >> # iptables -t nat -A PREROUTING -i venet0 -p tcp --dport 80 -j > >> REDIRECT --to 8888 > >> iptables: No chain/target/match by that name > >> > >> > >> Help!!! > >> > >> Thanks > >> > >> Ian Moyce > > > > Seems like you're missing NAT support in your kernel maybe? > > Hi, > > NAT seems to be working okay as I am using it as a VPN server...! Specifically the REDIRECT target needs to be compiled into the kernel or full nat support. ------------------------------------------------------------------------------------------ This e-mail was checked by the e-Sweeper Service. For more information visit our website, Clearswift Corporation e-Sweeper : http://www.mimesweeper.com/products/esweeper/ ------------------------------------------------------------------------------------------
