Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Hi
In my network there is 10 clients and I use fedora 2 as my gateway to internet. I setup squid proxy and socks5 proxy and they working perfect.
I need pop3, smtp and ftp proxy like squid ( without chache) just to forward clients pop3 and smtp requsts ( outlook express) to mail server at provider and to use ftp proxy trough fedora
I donot want to set up DNS and GATEWAY on my clients and dont wont to set MASQUERADE on my Fedora-linux.
Is there some suport for pop3 and smtp proxy in fedora or some other solution ??
Thanks in advance
Sorry for my english
Nenad
I can recommend these proxies..
pop3 p3scan
smtp amavisd-new (as smtp relay)
ftp frox
http dansguardian (used with squid)
These can be setup as transparent proxies using iptables REDIRECT
You may want to consider also adding virus checking to these with ClamAV. (run them all as user clamav)
Using exim for MTA is also very helpful. You can integrate spam scanning with exican (integrates spamassain) and you can scan for viruses (for free using sophie). Have a look at
I was trying to avoid suggesting setting up a full blown MTA.
There's quite a lot to be configured for relaying without it being abused later..
Of course as you say bagira, Exim or Postfix or Sendmail can be effective setups. Just quite big..
I have found amavisd-new to be very quick to get going if it's only relaying to one mail server and only listening on localhost.
The spam checks only seem to make sense for incoming mail, rather than outgoing mail..
end everything work like charm. Do not have problem with emula upload or p2p programs , set delay pools for squid, and I can limit single ftp, socks or mail port with CBQ. Do not have to set gateway for clients or DNS server, and my linux box can change local IP as I wont , a have to change just new IP for proxy on clients. Now my bandwidth is working perfect.
Now I came on interesting idea, to permit p2p programs over socks5 proxy ( all of them have options for socks-proxy emula , shareza, kazza) and my idea is to limit socks5 port ( 1080 ) download and upload to local network because I do not wont to irresponsible user eat all my bandwidth, so I am again at problem
I configure CBQ to limit traffic to local network on port 1080 and it works excellent for limiting downloads but uploads go like crazy, because CBQ can not limit uploads to my linux box on port 1080.
My question is: Is there solution to limit UPLOADS and DOWNLOAD from my local network to LINUX box on single port (1080) ??
Thank you in advance
Sorry for my bad English
Petar
I am also trying to use pop3.proxy, but without success. Can you tell me how you managed to get it to work? Did you just edit the /etc/inetd.conf file or did you also have to change your iptables?
Originally posted by pettar My question is: Is there solution to limit UPLOADS and DOWNLOAD from my local network to LINUX box on single port (1080) ??
You could probably configure iptables to forward the default ports of those applications to port 1080.
I use a similar setup on my NAT firewall. I want all webtraffic to pass through my proxy/filter running on port 4000. So what I do is I forward all traffic on 80 to 4000 and then deny traffic on 80. That way if they delete the proxy settings, their packets are still sent through the filter.
I am also trying to use pop3.proxy, but without success. Can you tell me how you managed to get it to work? Did you just edit the /etc/inetd.conf file or did you also have to change your iptables?
Just edit /etc/inetd.d/
take attention on sendmail service that is started by default and listening on pop3 port (110)
If you need exact configuration, post the request here where the problem started....
Petar
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.