LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 12-08-2005, 02:22 PM   #1
varange
LQ Newbie
 
Registered: Oct 2005
Posts: 12

Rep: Reputation: 0
Lightbulb How to allow only Squid to access the internet?


Hi

Our little office network consists of a DSL router, and one subnet with about 15 hosts.

One of the hosts is running Squid, and it all works fine with the browsers on the clients set to use Squid.

Of course, the users can simply choose to not use a proxy and can surf the internet directly. This is what I'm hoping to change.

What gets me is how to set up my DSL router to allow only the machine running Squid to request web pages. Or should I be looking at the switch for a solution.

I guess what I really need is someone to help me understand the mechanism of how to tackle the problem more than a HOWTO.

The Router has a web interface. It allows me to black and allow traffic from and to certain machines based on which port the request is sent on. Sometimes it takes the value of 0.0.0.0 as the IP address. Would this mean that it allows all traffic on that port?

The router is a Dynalink RTA220.

Thanks
 
Old 12-08-2005, 03:56 PM   #2
Finlay
Senior Member
 
Registered: Mar 2003
Location: Seattle
Distribution: Slackware ?-14.1
Posts: 1,029

Rep: Reputation: 47
does your router allow you to block outgoing ports?
if so you can block http and https, and only allow it from the squid box.

other option, which may cause some routing issues, is to set your default gateway in the DHCP to use the squid box.
 
Old 12-08-2005, 10:28 PM   #3
varange
LQ Newbie
 
Registered: Oct 2005
Posts: 12

Original Poster
Rep: Reputation: 0
Yes it does allow blocking of outgoing ports.

What I can't figure out is how to disallow all port 80 packets, but allow it for one host.

Interesting idea with the gateway. Hmmmm.
 
Old 12-08-2005, 11:23 PM   #4
angrybeaver
Member
 
Registered: Aug 2004
Location: .au
Distribution: debian, BSD
Posts: 104

Rep: Reputation: 16
there's not much in the way of documentation for that router, but basically you want a blanket deny rule for 0.0.0.0 outbound on TCP/80 and an allow rule for your proxy server. If it came with a manual or .pdf on a cd-rom etc, then it should detail how to do this...
 
Old 12-09-2005, 01:00 AM   #5
varange
LQ Newbie
 
Registered: Oct 2005
Posts: 12

Original Poster
Rep: Reputation: 0
Indeed, the documentation, as always, is terrible. Thanks for taking the time , angrybeaver.

Like you said: I need two rules. I tried to firstly deny all traffic, and then allow for only the one machine. Grrr, no luck thus far.

Maybe I should give you access to the router, see if you can do something with it?
 
Old 12-09-2005, 01:22 AM   #6
Finlay
Senior Member
 
Registered: Mar 2003
Location: Seattle
Distribution: Slackware ?-14.1
Posts: 1,029

Rep: Reputation: 47
try reversing the order of rules, allow then deny
 
Old 12-09-2005, 01:24 AM   #7
varange
LQ Newbie
 
Registered: Oct 2005
Posts: 12

Original Poster
Rep: Reputation: 0
OK, good idea. Thanks. I'll try on Monday :-)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
config squid so some IP can access internet, and others just the server? 4mix Linux - Networking 5 07-20-2004 05:08 PM
slow internet access using squid gigi Linux - Networking 4 01-20-2004 12:59 AM
linux squid and iptables for secure lan for internet access. pune_abhishek Linux - Networking 4 11-30-2003 07:20 PM
Secure Proxy Configuration(squid) for a LAN to access Internet pune_abhishek Linux - Networking 5 11-30-2003 01:33 PM
Squid:2nd Browser access Internet SPEED dead becomes dead slow mwj Linux - Software 1 10-04-2003 01:40 PM


All times are GMT -5. The time now is 10:00 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration