Re: aiuto per proxy trasparente con squid
2009/1/4 Roberto Macchetta <roby.programmer@fastwebnet.it>:
> # DNAT port 80 request comming from LAN systems to squid 3128
> #($SQUID_PORT) aka transparent proxy
> iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT
>
> # if it is same system
> iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT
Cambia queste due regole nella regola:
iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j REDIRECT
--to-port $SQUID_PORT
E aggiungi la regola
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
--
Dario Pilori
-Linux registered user #406515
-Debian GNU/Linux user
Reply to: