2009/1/4 Roberto Macchetta <roby.program...@fastwebnet.it>:
> # DNAT port 80 request comming from LAN systems to squid 3128
> #($SQUID_PORT) aka transparent proxy
> iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to 
> $SQUID_SERVER:$SQUID_PORT
>
> # if it is same system
> iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT 
> --to-port $SQUID_PORT

Cambia queste due regole nella regola:
iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j REDIRECT
--to-port $SQUID_PORT

E aggiungi la regola
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT


-- 
Dario Pilori
-Linux registered user #406515
-Debian GNU/Linux user


-- 
Per REVOCARE l'iscrizione alla lista, inviare un email a 
debian-italian-requ...@lists.debian.org con oggetto "unsubscribe". Per
problemi inviare un email in INGLESE a listmas...@lists.debian.org

To UNSUBSCRIBE, email to debian-italian-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to