Iptables with squid

asifbasha · 06-14-2010, 11:51 PM

Hai to all

i have the following ip assignments

fedora (iptables)
eth0 -private :192.168.1.1
eth1 -public : 186.117.50.6

squid proxy
192.168.1.10:3128

my clients range

192.168.2.0/24

how can i make my clients to browse internet only from proxy server

my network is NAT 'ed .

Please specify a iptable rule to allow internet access for my clients to browse ONLY if they come through proxy server .

GlennsPref · 06-15-2010, 04:20 AM

add something like this to ip tables...

Code:

....................
        #EXT_IF=ppp0 change to household network Apr15-2010
	EXT_IF=eth0
	INT_IF=eth1
	INT_NET=192.168.0.2/24

....................
## --- NAT --- ##
#

	# Enable masquerade

	$IPTABLES -A POSTROUTING -t nat -o $EXT_IF -j MASQUERADE

#
## -- Transparent proxy to Squid --- ##
#

	$IPTABLES -t nat -A PREROUTING -i $INT_IF -p tcp --dport 80 -j REDIRECT --to-port 3128

and make sure the port is the same in /etc/squid/squid.conf...

Code:

# Squid normally listens to port 3128
http_port 192.168.0.2:3128 transparent
#http_port 3128

and add transparent at the end.

in /etc/sysctl.conf,

Code:

net.ipv4.conf.all.forwarding = 1  #hacked

I don't use ipv6 so, I can't comment on that.

A site that has helped me in the past is

http://www.linuxhomenetworking.com/

I set both konqueror (kde4) and firefox to use the local proxy on this machine.

Hope this gives you something to look up.

Cheers Glenn