Hi,

Sorry if question like this was asked before.

Well I have Linux Server on Debian (running web, mysql, samba, ssh, squid).
Linux server is runing and with network interfaces:
eth1 --> internet
eth0 --> local network (switch)

I have 3 Linux clients (Kubuntu), 2 Windows XP clients. All clients are connected to switch, and then switch is connected to eth0 on Linux Server.

Every client should automaticaly use Squid proxy, log all opened pages, and with squidGuard all unwanted pages should be filtered. When a users log into Windows (connecting using samba) squid would automatically use this uid for squid proxy. For Linux should be the same.
For some unknow reason, no client uses Squid, and squid and squidGuard have no functions at all I need to forward somehow all port that goes thru squid, so that I can have logs with which user, from which ip had open some sites.

But I think there is something wrong with iptables, I do not know what, and how to set it properly.

When I set in client resolv.conf nameserver from ISP, I could do for example ping www.google.com
but when I set 192.168.0.1 as nameserver in resolv.conf I could only ping ip adresse, not the domains, that means something with dns server is wrong. But in any case users can surf thru internet, which is due to security not really smart.

So please, could someone feed me up with some very good link to do following, mentioned above, or some instructions in reply.

Thank you very much

John

hi,

1) set squid as transparent proxy in the server, you can google out how to set squid as transparent proxy, u can also go through the link below

http://www.cyberciti.biz/tips/linux-...uid-howto.html

this thread below might also help
---------------------------------
http://www.linuxquestions.org/questi...d.php?t=452689

2) then set the all the traffic coming on to your eth1(connected to local n/w) to the server ip using iptables.

3) in your clients machines(xp) set the "default gateway" in the tcp/ip properties to the server ip address where squid is setup ie. 192.168.0.1 and for the primary DNS and alternate DNS set the same which you have given in the server.

just go through the above and google out/search LQ as much as possible to get a foolproof solution that’s suits you.

nesargha

"Men occasionally stumble over the truth, but most of them pick themselves up
and hurry off as if nothing had happened". - Winston Churchill