hmm, why is it when I remove the line -A INPUT --dport 80 -j ACCEPT in my firewall rule the tranparent proxy in my machine does not work?
my squid runs at port 80. By default I set all FORWARD, OUTPUT, INPUT to drop. Maybe I really don't need that other line so please enligthen me. On Wednesday 03 December 2003 16:40, Glynn S. Condez wrote: > From: "smart penguin" <[EMAIL PROTECTED]> > > You might need to enable the netfilter code by compiling the squid to > ./configure --enable-linux-netfilter > > > httpd_accel_host virtual > > httpd_accel_port 80 > > httpd_accel_with_proxy on > > httpd_accel_uses_host_header on > > This should work. > > > iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j > > REDIRECT --to-port 3128 > Only this single command is needed to make transparent proxy work. > > You might also check your kernel if the proper options are set. > > Under General Setup > -- Networking support > --Sysctl support > > Under Networking Options > --Network packet filtering > --TCP/IP networking > > Under Networking Options -> IP: Netfilter Configuration > --Connection tracking > --IP tables support > --Full NAT > --REDIRECT target support > --Under File Systems > --/proc filesystem support > > ..Disable the Fast Switching under Networking Options > Compile the kernel and be sure to enable the IP forwarding. > > HTH > > //Glynn -- Alben Benavente Alteza Information Systems Security Administration Information Systems Dept./ Philippine Airlines -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
