Quoting Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>:
On 10/31/07 10:11, dhottinger@xxxxxxxxxxxxxxxxxxxxxx wrote:
Not sure if this is the best practice, but it works fine. What I
would like to do, instead of dropping this traffic is have it sent
to an internal webserver that has our acceptable use policy on it.
Is there a REDIRECT command, or what would be the best way to
accomplish this. Most of this traffic is actually on port 443, and
I cant funnel this through my transparent proxy (squid).
Yes. You want to look in to DNATing the traffic to an internal web
server that is specifically set up to do what you are wanting to do.
Hint, set up the web server of your choice that will answer any and all
domain names with one single page, the 404 (not found) error page that
is the content that you want displayed. That way no matter what is
requested, your page will be displayed. I would also suggest that you
include the headers to control how long the page is cached for, say 5 -
15 minutes. You may or may not want to return a 200 reply code. Some
browsers will display ""Friendly 404 pages and thus not display your
text.
Grant. . . .
-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Cool and thanks,
So something like:
$IPC -t nat -A PREROUTING -d cantbustme.net -j DNAT --to-destination
mywebserver.com ? Where cantbustme is the site I want to redirect and
mywebserver is the box with the youve been busted page?
ddh
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
"rarely do people communicate, they just take turns talking"
-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
