How to force user to use the squid server

depam · 10-10-2005, 07:36 PM

Hi guys,

I'm having problem running my squid server as a transparent proxy. I have two network cards; one is connected to the router (192.168.1.150) and the other one is for use on the private network(192.168.0.220). I want to set up my server in such a way that I don't have to set the settings in my browser (http_proxy and port). I've read about IPROUTE and eveything but its just too complicated for me. I know someone out there is knowledgeable on this.

sharma_arpit · 10-11-2005, 12:53 AM

Hi
Try the following script lines
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 \
-j REDIRECT --to-port 3128
iptables -A INPUT -j ACCEPT -m state \
--state NEW,ESTABLISHED,RELATED -i eth1 -p tcp \
--dport 3128
iptables -A OUTPUT -j ACCEPT -m state \
--state NEW,ESTABLISHED,RELATED -o eth0 -p tcp \
--dport 80

iptables -A INPUT -j ACCEPT -m state \
--state ESTABLISHED,RELATED -i eth0 -p tcp \
--sport 80
iptables -A OUTPUT -j ACCEPT -m state \
--state ESTABLISHED,RELATED -o eth1 -p tcp \
--sport 80

depam · 10-11-2005, 02:23 AM

I'm really sorry for asking this but do i just have to type it in the shell? Or should i add it on /etc/sysconfig/iptables? I have tried typing it in the shell but nothing happened. My eth0 is my connection to my router while my eth1 is my private connection. I'm really sorry if I'm asking you again. I just want to know how to do it. Thanks