Hello all, netfilter!
Does the for use Squid with firewall and masq, it need 4 rules, if
default policy is DROP?
eth1 int_ip eth0 ext_ip
| FIREWALL |
1.-->> -->>3.
USER | | INET
4.<<-- SQUID(3128) <<--4.
| |
1.user request It will be:
iptables -t nat -A PREROUTING -i eth1 -s USER -p tcp --dport 80 -j DNAT --to
int_ip:3128
2. allow squid to get out from firewall
iptables -A OUTPUT -o eth0 -s ext_ip -p tcp --dport 80 -j ACCEPT
3. allow packets from www server come to squid
iptables -A INPUT -i eth0 -d ext_ip -p tcp --sport 80 -j ACCEPT
4. allow answer squid to user
iptables -A OUTPUT -o eth1 -s int_ip -p tcp --sport 80 -j ACCEPT
Is my head think in rigth direction?
I work on firewall with rule: what is not permited, that DROPED
And i make a rule for every step in long connections.
P.S. i write this rules from my understending of working such local
processes as SQUID. :-) and i can make some mistake in them.
Thanks!
--
� ���������,
Leo mailto:[EMAIL PROTECTED]
