LinuxQuestions.org - iptables ignores rules

I'm following a guide to installing dansguardian (a web filter) on a desktop machine. The setup uses squid, dansguardian, and iptables; iptables is used to transparently route all http connections through the proxy. The guide doesn't go into detail about iptables though, it assumes that you already have iptables working. At first, iptables was giving me a lot of errors. But after compiling a bunch of kernel modules, it stopped complaining and *appeared* to be working fine.

Here are the rules I need to add:

Code:

iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner --uid-owner squid -j ACCEPT

iptables -t nat -A OUTPUT -p tcp --dport 3128 -m owner --uid-owner squid -j ACCEPT

iptables -t nat -A OUTPUT -p tcp --dport 80 -j REDIRECT --to-ports 8080

iptables -t nat -A OUTPUT -p tcp --dport 3128 -j REDIRECT --to-ports 8080

The commands produce zero output, so I just assumed iptables was working fine. I added all my rules. However, when I do iptables -L:

Code:

Chain INPUT (policy ACCEPT)

target    prot opt source              destination



Chain FORWARD (policy ACCEPT)

target    prot opt source              destination



Chain OUTPUT (policy ACCEPT)

target    prot opt source              destination

No rules!!! It's ignoring me! :o What is wrong, why won't it add any rules? Any ideas? Thanks in advance. Here is some more information that might be helpful:

Code:

root@cookie linux # uname -a

Linux cookie 2.6.10-gentoo-r4 #2 Sat Jan 15 16:49:16 EST 2005 i686 Intel(R) Pentium(R) 4 CPU 1.60GHz GenuineIntel GNU/Linux

Code:

#

# Networking support

#

CONFIG_NET=y



#

# Networking options

#

CONFIG_PACKET=y

# CONFIG_PACKET_MMAP is not set

# CONFIG_NETLINK_DEV is not set

CONFIG_UNIX=y

CONFIG_NET_KEY=y

CONFIG_INET=y

# CONFIG_IP_MULTICAST is not set

# CONFIG_IP_ADVANCED_ROUTER is not set

# CONFIG_IP_PNP is not set

CONFIG_NET_IPIP=m

# CONFIG_NET_IPGRE is not set

# CONFIG_ARPD is not set

CONFIG_SYN_COOKIES=y

CONFIG_INET_AH=y

CONFIG_INET_ESP=y

CONFIG_INET_IPCOMP=y

CONFIG_INET_TUNNEL=y

CONFIG_IP_TCPDIAG=y

# CONFIG_IP_TCPDIAG_IPV6 is not set



#

# IP: Virtual Server Configuration

#

CONFIG_IP_VS=m

# CONFIG_IP_VS_DEBUG is not set

CONFIG_IP_VS_TAB_BITS=12



#

# IPVS transport protocol load balancing support

#

# CONFIG_IP_VS_PROTO_TCP is not set

# CONFIG_IP_VS_PROTO_UDP is not set

# CONFIG_IP_VS_PROTO_ESP is not set

# CONFIG_IP_VS_PROTO_AH is not set



#

# IPVS scheduler

#

# CONFIG_IP_VS_RR is not set

# CONFIG_IP_VS_WRR is not set

# CONFIG_IP_VS_LC is not set

# CONFIG_IP_VS_WLC is not set

CONFIG_IP_VS_LBLC=m

CONFIG_IP_VS_LBLCR=m

# CONFIG_IP_VS_DH is not set

# CONFIG_IP_VS_SH is not set

# CONFIG_IP_VS_SED is not set

# CONFIG_IP_VS_NQ is not set



#

# IPVS application helper

#

# CONFIG_IPV6 is not set

CONFIG_NETFILTER=y

# CONFIG_NETFILTER_DEBUG is not set



#

# IP: Netfilter Configuration

#

CONFIG_IP_NF_CONNTRACK=y

# CONFIG_IP_NF_CT_ACCT is not set

# CONFIG_IP_NF_CONNTRACK_MARK is not set

# CONFIG_IP_NF_CT_PROTO_SCTP is not set

# CONFIG_IP_NF_FTP is not set

# CONFIG_IP_NF_IRC is not set

# CONFIG_IP_NF_TFTP is not set

# CONFIG_IP_NF_AMANDA is not set

# CONFIG_IP_NF_QUEUE is not set

CONFIG_IP_NF_IPTABLES=m

CONFIG_IP_NF_MATCH_LIMIT=m

CONFIG_IP_NF_MATCH_IPRANGE=m

CONFIG_IP_NF_MATCH_MAC=m

CONFIG_IP_NF_MATCH_PKTTYPE=m

CONFIG_IP_NF_MATCH_MARK=m

CONFIG_IP_NF_MATCH_MULTIPORT=m

CONFIG_IP_NF_MATCH_TOS=m

CONFIG_IP_NF_MATCH_RECENT=m

CONFIG_IP_NF_MATCH_ECN=m

CONFIG_IP_NF_MATCH_DSCP=m

CONFIG_IP_NF_MATCH_AH_ESP=m

CONFIG_IP_NF_MATCH_LENGTH=m

CONFIG_IP_NF_MATCH_TTL=m

CONFIG_IP_NF_MATCH_TCPMSS=m

CONFIG_IP_NF_MATCH_HELPER=m

CONFIG_IP_NF_MATCH_STATE=m

CONFIG_IP_NF_MATCH_CONNTRACK=m

CONFIG_IP_NF_MATCH_OWNER=m

CONFIG_IP_NF_MATCH_ADDRTYPE=m

CONFIG_IP_NF_MATCH_REALM=m

CONFIG_IP_NF_MATCH_SCTP=m

CONFIG_IP_NF_MATCH_COMMENT=m

# CONFIG_IP_NF_MATCH_HASHLIMIT is not set

CONFIG_IP_NF_FILTER=m

CONFIG_IP_NF_TARGET_REJECT=m

CONFIG_IP_NF_TARGET_LOG=m

CONFIG_IP_NF_TARGET_ULOG=m

CONFIG_IP_NF_TARGET_TCPMSS=m

CONFIG_IP_NF_NAT=m

CONFIG_IP_NF_NAT_NEEDED=y

CONFIG_IP_NF_TARGET_MASQUERADE=m

CONFIG_IP_NF_TARGET_REDIRECT=m

CONFIG_IP_NF_TARGET_NETMAP=m

# CONFIG_IP_NF_TARGET_SAME is not set

CONFIG_IP_NF_NAT_LOCAL=y

# CONFIG_IP_NF_NAT_SNMP_BASIC is not set

# CONFIG_IP_NF_MANGLE is not set

# CONFIG_IP_NF_RAW is not set

# CONFIG_IP_NF_ARPTABLES is not set

CONFIG_XFRM=y

CONFIG_XFRM_USER=y



#

# SCTP Configuration (EXPERIMENTAL)

#

# CONFIG_IP_SCTP is not set

# CONFIG_ATM is not set

# CONFIG_BRIDGE is not set

# CONFIG_VLAN_8021Q is not set

# CONFIG_DECNET is not set

# CONFIG_LLC2 is not set

# CONFIG_IPX is not set

# CONFIG_ATALK is not set

# CONFIG_X25 is not set

# CONFIG_LAPB is not set

# CONFIG_NET_DIVERT is not set

# CONFIG_ECONET is not set

# CONFIG_WAN_ROUTER is not set



#

# QoS and/or fair queueing

#

# CONFIG_NET_SCHED is not set

CONFIG_NET_CLS_ROUTE=y



#

# Network testing

#

# CONFIG_NET_PKTGEN is not set

# CONFIG_NETPOLL is not set

# CONFIG_NET_POLL_CONTROLLER is not set

# CONFIG_HAMRADIO is not set

# CONFIG_IRDA is not set

# CONFIG_BT is not set

CONFIG_NETDEVICES=y

# CONFIG_DUMMY is not set

# CONFIG_BONDING is not set

# CONFIG_EQUALIZER is not set

# CONFIG_TUN is not set

# CONFIG_NET_SB1000 is not set

Code:

root@cookie linux # iptables --version

iptables v1.2.11