LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 02-29-2008, 06:10 PM   #1
kool_kid
Member
 
Registered: Sep 2004
Location: Dubai, UAE
Distribution: RHL
Posts: 350

Rep: Reputation: 30
Proxy Server for multi networks


hi

I have setup vLAN's, now I want record all internet in/out traffic and also restrict the ips on url based restriction or word based restriction, can someone tell me how do I achieve this?
 
Old 03-01-2008, 01:59 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
well this has nothing at all to do with vlans, you need to actually explain your network architecture. generally that too shouldn't matter hugely if you only have one internet connection with all traffic routing towards it. that's just a generic squid install.
 
Old 03-01-2008, 07:47 PM   #3
kool_kid
Member
 
Registered: Sep 2004
Location: Dubai, UAE
Distribution: RHL
Posts: 350

Original Poster
Rep: Reputation: 30
I want to filter the traffic on vLAn basis, example i may add restriction to vlan 10 and I may not add restriction to vlan 20 I may just need to monitor the incoming and outgoing traffic at vlan 30 without restricting anything etc.

By the way can we monitor all the traffic just with iptables?
 
Old 03-02-2008, 02:07 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
no, as above this isn't about vlans. you can't filter on "vlan 20" as this means nothing to a server. instead you'd filter on ip subnet, 192.168.1.0/24 etc...
 
Old 03-02-2008, 08:42 PM   #5
kool_kid
Member
 
Registered: Sep 2004
Location: Dubai, UAE
Distribution: RHL
Posts: 350

Original Poster
Rep: Reputation: 30
Quote:
no, as above this isn't about vlans. you can't filter on "vlan 20" as this means nothing to a server. instead you'd filter on ip subnet, 192.168.1.0/24 etc...
So in this case it would mean that all the traffic thats coming/going to 192.168.1.0/24 would be monitored, well in that case would squid show me the source/destination IP in logs that of a vlan network as in vlan 20 or would it show me the 192.168.1.0/24 subnet Ip ?

Becasue it doesn't make lot of sense to monitor 192.168.1.0/24 subnet if I don't come to know which ip is accessing what url whether it be from any network.
 
Old 03-03-2008, 03:08 AM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
o, well i think it's fair to say you're still fairly unsure of what a vlan really is. for the sake of my sanity, let's just never say "vlan" in this thread again.

if you monitor the 192.168.1.0/24 subnet then of course you know what ip is accessing the net, that's *exactly* what you're monitoring...
 
Old 03-04-2008, 01:27 PM   #7
kool_kid
Member
 
Registered: Sep 2004
Location: Dubai, UAE
Distribution: RHL
Posts: 350

Original Poster
Rep: Reputation: 30
I think i can understand what you're saying. Did you ever try to install squid on vyatta? anybody did?
 
Old 03-04-2008, 02:08 PM   #8
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,415

Rep: Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968Reputation: 1968
vyatta?? wtf?? no i never did, would be possible though.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to enable squid proxy to accept webtraffic from two networks sakthi.s Linux - Server 6 04-05-2007 10:02 AM
squid proxy,2 nics for 2 networks, problematic. prowleritus Linux - Networking 1 02-11-2007 09:34 PM
multi-home on two ISP networks timjowers Linux - Networking 1 12-02-2006 11:28 AM
multi web proxy lopl Linux - Networking 1 12-05-2005 05:03 AM
Multi Network Firewall Proxy and DHCP Problem linedpaper Linux - Security 10 12-13-2003 09:23 PM


All times are GMT -5. The time now is 01:01 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration