Re: Bridge + Squid + Inbound port 80 headaches

[Henrik Nordstrom <hno@xxxxxxxxxxxxxxx>]

On Wed, 2 Nov 2005, Tim Roberts wrote:

> # Makeshift Forward anything coming in on Bridge Port 80 to Squid
> iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port 
> 3128

You should probably refine this to only packets coming in on the correct 
physical device.. or exclude your own address spaces ("-t nat -A 
PREROUTING -d mypublicipspace/21 -j ACCEPT" before this rule)

Regards
Henrik