IPTABLES, SQUID, DANSGUARDIAN and Transparent Proxy

metallica1973 · 05-21-2007, 01:16 PM

I will give it a shot . thanks

teluguswan · 05-22-2007, 06:09 AM

thanks for the help

gr8scot · 09-03-2007, 06:37 PM

Quote:

Originally Posted by metallica1973

AS far as using the redirect, can you give me an example. I dig for some information using the web. Many thanks

You were close with

$IPTABLES -A PREROUTING -t nat -i $EXTIF -p tcp --dport 8080 -j REDIRECT --to-port 192.168.3.2:3128

but it should be

$IPTABLES -A PREROUTING -t nat -i $EXTIF -p tcp --dport 8080 -j DNAT --to-destination 192.168.3.2:3128

The syntax 'REDIRECT --to-port ...' allows you to specify a port only, not the IP address.

win32sux · 09-03-2007, 07:17 PM

Quote:

Originally Posted by gr8scot

but it should be

$IPTABLES -A PREROUTING -t nat -i $EXTIF -p tcp --dport 8080 -j DNAT --to-destination 192.168.3.2:3128

No, this rule should not be applied to the external interface, it should not be applied to packets destined to port 8080, and it should not DNAT to port 3128. It is meant to be applied to HTTP packets (TCP port 80) coming into the internal interface, sending them to DansGuardian (which listens on port 8080). Either way, it doesn't really matter, as you shouldn't be resurrecting dead threads unless it's absolutely necessary. Please let this thread rest in peace.