Hi,

I've been configuring this firewall for a week now and it seems I cant get it right.

I have iptables running on my server. I want my clients to use port 8080 for their browsing rather that regular port 80. What I want to accomplished is to block all media video streaming that use port 80. Many streaming protocols run on port 80 so firewall cant tell them apart from web.

My problem now, I cant redirect http to use port 8080. How will I make my firewall uses port 8080 instead of 80?

Take note: I'm not running squid and this is not a webserver, just proxy firewall.

Below is the one working right now.

-A FORWARD -i eth1 -o eth0 -p tcp -m tcp --dport 80 -j ACCEPT


Everytime I changed the "dport 80" to 8080, my clients can get out. What seems to be the problem? Please help.

You will need to switch to squid for this. If you change it to 8080 then all of the servers will need to be running on port 8080 which would mean contacting every webserver owner in the known world and beyond and ask them to change it.