Dear All:
Linux has three card:
One is 192.168.1.250 (Internet) by 192.168.1.1
The other two are: 192.168.2.1, 192.168.3.1
Client: 192.168.2.100-192.168.2.200 / IP 192.168.3.100-192.168.3.200
I have a few questions
1: I'm in the allocation of time, add squid --enable-underscore options
But on a visit to the site is still has underlined
2: why Teamviever software from external links, always break, then cannot connect
But, I have broken the network ,configuration files below
http_port 3128
ipcache_size 1024
ipcache_low 90
ipcache_high 95
cache_mem 128 MB
cache_dir ufs /var/spool/squid 4096 16 256
cache_effective_user squid
cache_effective_group squid
dns_nameservers 192.168.1.10
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
visible_hostname gw.efc.cory
cache_mgr kavin@xxxxxxxxxxxxxxxx
acl 2 src 192.168.2.100-192.168.2.200/32
http_access allow 2
acl 3 src 192.168.3.100-192.168.3.200/32
http_access allow 3
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
http_access allow localhost
http_access deny all
*mangle
:PREROUTING ACCEPT [11949307:8517837757]
:INPUT ACCEPT [61863944:9774933638]
:FORWARD ACCEPT [11730595:8495305567]
:OUTPUT ACCEPT [40941:4437279]
:POSTROUTING ACCEPT [11214754:8468974725]
COMMIT
*nat
:PREROUTING ACCEPT [694231:44896066]
:POSTROUTING ACCEPT [71812:4199611]
:OUTPUT ACCEPT [1788:412902]
-A POSTROUTING -m iprange --src-range 192.168.3.100-192.168.3.200 -o eth0 -j SNAT --to-source 192.168.1.250
-A POSTROUTING -m iprange --src-range 192.168.2.100-192.168.2.200 -o eth0 -j SNAT --to-source 192.168.1.250
-A PREROUTING -i eth2 -p tcp -m iprange --src-range 192.168.3.100-192.168.3.200 --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -i eth1 -p tcp -m iprange --src-range 192.168.2.100-192.168.2.200 --dport 80 -j REDIRECT --to-ports 3128
COMMIT
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [37276:4032229]
-A INPUT -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -m limit --limit 10/sec
-A INPUT -i lo -j ACCEPT
-A INPUT -p udp -m multiport --dports 53,123,161,162,500,1701,1194,1993 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 80,53,8080,3128,9101,9102,9103 -j ACCEPT
-A INPUT -s 168.95.1.1 -j ACCEPT
-A INPUT -s 168.95.192.1 -j ACCEPT
-A INPUT -s 211.72.67.226 -j ACCEPT
-A INPUT -s 216.146.35.35 -j ACCEPT
-A INPUT -s 216.146.36.36 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 168.95.1.1 -j ACCEPT
-A FORWARD -s 168.95.192.1 -j ACCEPT
-A FORWARD -s 211.72.67.226 -j ACCEPT
-A FORWARD -s 216.146.35.35 -j ACCEPT
-A FORWARD -s 216.146.36.36 -j ACCEPT
-A FORWARD -d 168.95.1.1 -j ACCEPT
-A FORWARD -d 168.95.192.1 -j ACCEPT
-A FORWARD -d 211.72.67.226 -j ACCEPT
-A FORWARD -d 216.146.35.35 -j ACCEPT
-A FORWARD -d 216.146.36.36 -j ACCEPT
-A FORWARD -m iprange --src-range 192.168.2.100-192.168.2.200 -d 192.168.1.176 -j ACCEPT
-A FORWARD -s 192.168.10.0/24 -j ACCEPT
-A FORWARD -s 192.168.11.0/24 -j ACCEPT
-A FORWARD -d 192.168.10.0/24 -j ACCEPT
-A FORWARD -d 192.168.11.0/24 -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -d 211.157.108.130 -j ACCEPT
-A FORWARD -d 220.128.204.167 -j ACCEPT
-A FORWARD -d 211.72.67.227 -j ACCEPT
-A FORWARD -d 211.72.67.226 -j ACCEPT
-A FORWARD -d 220.128.204.163 -j ACCEPT
-A FORWARD -d 61.66.137.4 -j ACCEPT
-A FORWARD -d 61.66.137.3 -j ACCEPT
-A FORWARD -d 61.66.137.5 -j ACCEPT
-A FORWARD -p udp -m multiport --dports 53,123,137,138 -j ACCEPT
-A FORWARD -p tcp -m multiport --dports 20,21,53,139,445,1863,5900,3128,8080 -j ACCEPT
-A FORWARD -m iprange --src-range 192.168.3.100-192.168.3.200 -p tcp -m multiport --dports 80,443,25,110 -j ACCEPT
-A FORWARD -m iprange --src-range 192.168.2.100-192.168.2.200 -p tcp -m multiport --dports 80,443,25,110 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
Hope everybody to help me to solve it
Thank
Kavin
