Iptables routing problem

GGery · 03-25-2006, 05:18 PM

Hello All

First sorry for my english condition.

I have Satellite internet in debian box.
Everything works fine (in local area)
I want to make router to my home network on this PC.

dvb interface for download
ppp0 for upload
and local proxy client (from my provider) arrange this together. This works only with two local ports 9202 and 9203.

Some people tell me to use Squid server,some to use iptables rules.
But how!!!!

Best Regards
GG

KneeLess · 03-26-2006, 11:23 AM

It seems you want to make your Debian box the gateway to your uplink. You need network address translation then. Try this link. If that's not what you want, ask again.

GGery · 03-27-2006, 01:05 AM

Thanks KneeLess

I have already NAT rule

Quote:

/sbin/iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

But the problem is how to make redirect request for url (for example google)
from host in home network to localhost proxy client ( in "server") and how to redirect the answer to that host.
The answer comes from dvb interface...

BR

win32sux · 03-27-2006, 06:32 AM

Quote:

Originally Posted by GGery

how to make redirect request for url (for example google)
from host in home network to localhost proxy client

like this:

Code:

iptables -t nat -A PREROUTING -p TCP -i $LAN_IFACE --dport 80 \
-j REDIRECT --to-port 3128

this changes outgoing (from LAN to WAN) HTTP packets in such a way that they no longer get forwarded, but instead go into the INPUT chain on the proxy... this is part of what's called transparent proxying, and it sounds like that's what you are looking for, although i'm not sure... you'd also need to tell squid to run in transparent mode by putting these lines in your squid.conf:

Code:

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

http://www.google.com/search?&q=squid+transparent+proxy

just my

...

GGery · 03-28-2006, 01:49 AM

Thanks win32sux

A don't have squid server. I have only proxy client for user authentication in satellite platform and for arrange this "hybrid" internet.
I still don't know "how to redirect the answer to lan host,that host who requested url

Thanks
GG