Re: Gateway with Iptables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Amos wrote:
I believe you need to exempt the traffic from squid (local machine IPA) from the REDIRECT about here.

$IPT -A PREROUTING -p tcp -s $SQUID_SERVER --dport 80 -j ACCEPT

... And use "http port 8080 transparent" in the squid.conf


> $IPT -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT > ###############################################################################
but after applying this users are able to connect to the Internet directly without enable proxy. what else i have to do to stop direct connection , they must use proxy.

--
Thanks & Regards,

Tarak Ranjan
___________________________
IS-Team
Liqwid Krystal

T:   +91 80  2509 1790 Ext. 107
E@:  tarak.ranjan@xxxxxxxxxxxxxxxxx
IM:  reachtarak@xxxxxxxxxxx

Online Learning|Certification|Learning Solutions: http://www.liqwidkrystal.com


-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux