Hi all,
I'm about to post a boat load of questions, so I apologise for the bulk mailing but they're each topics in their own right.

I've always that 127.0.0.1 was for running services which you don't want to have any external access i.e. if I'm running squid, I may only want it to be accessible to the local machine so that I can run it through dansguadian to do content filtering first. Is this the correct approach ?

lanpc -> dansguardian on gw(eth0)192.168.1.1:8080 -> squid transparent caching proxy on gw (lo)127.0.0.1:3128 -> (eth1) 10.10.10.1 -> (router)10.10.10.254

this would mean that squid could not be accessed by 192.168.1.* or 10.10.10.* apart from using it as a gw if the fw permits it.

is this right ?

cheers
Simon

Hi,

I dont really follow this...if I understand your quote:

...you want to filter content that comes into your box first and then filter it tru the loopback.

From the site:

So, I dont get it. But, I'd stroke this cat an other way: use a box as dedicated filter. Give it two net cards. One to the modem, the other to a switch to be linked to all the rest of the network.

I strongly doubt if my answer will suit your needs, but it's a thought...

Thor