LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 06-28-2008, 02:40 AM   #1
satish
Member
 
Registered: Jan 2006
Posts: 172

Rep: Reputation: 15
iptables rule to ignore squid proxy server


we are using squid proxy server which runs on redhat 9 version,in my office all pc's internet explorer browser configured for internet with use of proxy server in connection settings.in office we have one database web server which has the link http://192.168.1.249:8500, i want a iptable rule to ignore the squid proxy server.i don't want to remove internet connection settings from internet explorer for squid proxy server.if i do that they will not access the internet,all time i have to remove and add the internet connection setting for all machines. Requirement of iptables rule is that i don't want to disturb all clients when my proxy server is down.

local lan : 192.168.1.0/24
proxy server: 192.168.1.2
database web server ip: 192.168.1.249
squid proxy port : 3128


please suggest me any ignore rule for squid proxy server.

Regards


satish
 
Old 06-28-2008, 10:27 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,373

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
ignore? I don't understand what you really mean by ignore. it's up to the client browsers to use or not use a proxy, not a destination server, so what I think you mean doesn't really make any sense. As i understand it you want local users to connect to that one ip address directly. in that case it's down to the browser still, maybe you just need to add an exception to each browser, or the best method is to use a proxy.pac file held on a central server to control how every browser uses proxies to a finer level.
 
Old 06-30-2008, 08:22 AM   #3
dougbourne
LQ Newbie
 
Registered: Jun 2008
Posts: 29

Rep: Reputation: 15
"transparent proxy" its your answer?
define "ignore" ... ?
 
Old 07-02-2008, 07:18 AM   #4
satish
Member
 
Registered: Jan 2006
Posts: 172

Original Poster
Rep: Reputation: 15
iptables rule to ignore squid proxy server

i know the answer transparent proxy,but it creates me more difficult because transparent proxy works on gateway basis.when you put the proxy server ip address as a gateway then the internet works.in my setup we have one trading software whose router in our office .when we put router's ip address in the pc as a gateway then only the trading software works.why i required to ignore the proxy server is when we have work with proxy server to restart or shutdown the database software of our internal lan not works the users have to remove the settings in connection properties then only software works so that is why I required any iptable rule or any script to ignore the proxy server.so transparen proxy and remove of internet connections cannot work for me.

Regards


satish
 
Old 07-02-2008, 07:26 AM   #5
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,373

Rep: Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962Reputation: 1962
despite their initial appeal, transparent proxies are pretty horrible, and this is a good example of that. You can do better than use a transparent proxy, using a proy.pac file as above or similar.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
squid proxy server configuration & distribution of internet without proxy gaurav_gupta082 Linux From Scratch 2 07-31-2010 11:25 AM
Squid transparent proxy with iptables cksoo Linux - Server 5 06-12-2008 03:53 AM
squid proxy with iptables ssilayaraja Linux - Networking 7 04-14-2008 12:15 AM
Using ISA Server as Parent Proxy and want to setup Squid as dwonstream proxy tauseef1 Red Hat 1 04-09-2008 01:03 AM
IPTABLES for squid (Transparent proxy) kool_kid Linux - Networking 14 10-29-2007 10:45 AM


All times are GMT -5. The time now is 08:29 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration