|
I am running a transparent proxy on a remote
machine for an office using rdr rules which is working great. The cacheless
transparent proxy is tinyproxy 1.5.1, older versions didn't support transparent
mode. The reason this proxy is setup make our web usage go through our
205.23.1.32/27 network which is cheaper then going straight out onto the
internet.
The Nat machine with these rules is on another
network 210.23.55.0/24
The only problem I have is that I would like any
port 80 connect attempts going to 205.23.1.32/27 network to go directly to these
machines and not bother going through the transparent proxy on 205.23.1.50
To get around the problem I just added a rule for
each machine I wanted to connect directly, like "rdr fxp0 205.23.1.44/27
port 80 -> 205.23.1.44 port 80"
Is this OK? or is there a better method to do this?
like some general network range rule like this with a /27 (which I tried
and failed to no surprise :) rdr fxp0 205.23.1.32/27 port 80 ->
205.23.1.32/27 port 80"
map fxp1 172.17.168.0/24 -> 0/32 proxy port ftp
ftp/tcp
map fxp1 172.17.168.0/24 -> 0/32 portmap tcp/udp auto map fxp1 172.17.168.0/24 -> 0/32 rdr fxp0 205.23.1.37/27 port 80 -> 205.23.1.37 port 80 rdr fxp0 205.23.1.39/27 port 80 -> 205.23.1.39 port 80 rdr fxp0 205.23.1.40/27 port 80 -> 205.23.1.40 port 80 rdr fxp0 205.23.1.41/27 port 80 -> 205.23.1.41 port 80 rdr fxp0 205.23.1.42/27 port 80 -> 205.23.1.42 port 80 rdr fxp0 205.23.1.43/27 port 80 -> 205.23.1.43 port 80 rdr fxp0 205.23.1.44/27 port 80 -> 205.23.1.44 port 80 rdr fxp0 205.23.1.50/27 port 80 -> 205.23.1.50 port 80 rdr fxp0 205.23.1.52/27 port 80 -> 205.23.1.52 port 80 rdr fxp0 205.23.1.53/27 port 80 -> 205.23.1.53 port 80 rdr fxp0 205.23.1.54/27 port 80 -> 205.23.1.54 port 80 rdr fxp0 205.23.1.55/27 port 80 -> 205.23.1.55 port 80 rdr fxp0 205.23.1.59/27 port 80 -> 205.23.1.59 port 80 rdr fxp0 205.23.1.62/27 port 80 -> 205.23.1.62 port 80 rdr fxp0 210.23.55.71/27 port 80 -> 210.23.55.71 port 80 rdr fxp0 0.0.0.0/0 port 80 -> 205.23.1.50 port 8080 |
- Re: Ideal rdr rules? Leigh V
- Re: Ideal rdr rules? Leigh V
