Did that but still I have to open the port 80. The thing is ALLOW rule comes first before PREROUTING. What is there to route if there is no packet allowed to come in.
On Wednesday 03 December 2003 18:56, Glynn S. Condez wrote: > From: "alben benavente alteza" <[EMAIL PROTECTED]> > > > my squid runs at port 80. > > Why don't you try to change the squid port from 80 to something like 3128, > set the port forwading/redirect > and see what happens. > > > //Glynn > > > By default I set all FORWARD, OUTPUT, INPUT to drop. > > > > Maybe I really don't need that other line so please enligthen me. > > > > On Wednesday 03 December 2003 16:40, Glynn S. Condez wrote: > > > From: "smart penguin" <[EMAIL PROTECTED]> > > > > > > You might need to enable the netfilter code by compiling the squid to > > > ./configure --enable-linux-netfilter > > > > > > > httpd_accel_host virtual > > > > httpd_accel_port 80 > > > > httpd_accel_with_proxy on > > > > httpd_accel_uses_host_header on > > > > > > This should work. > > > > > > > iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j > > > > > > REDIRECT --to-port 3128 > > > Only this single command is needed to make transparent proxy work. > > > > > > > > > You might also check your kernel if the proper options are set. > > > > > > Under General Setup > > > -- Networking support > > > --Sysctl support > > > > > > Under Networking Options > > > --Network packet filtering > > > --TCP/IP networking > > > > > > Under Networking Options -> IP: Netfilter Configuration > > > --Connection tracking > > > --IP tables support > > > --Full NAT > > > --REDIRECT target support > > > --Under File Systems > > > --/proc filesystem support > > > > > > ..Disable the Fast Switching under Networking Options > > > Compile the kernel and be sure to enable the IP forwarding. > > > > > > HTH > > > > > > //Glynn > > > > -- > > Alben Benavente Alteza > > Information Systems Security Administration > > Information Systems Dept./ Philippine Airlines > > > > -- > > Philippine Linux Users' Group (PLUG) Mailing List > > [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) > > Official Website: http://plug.linux.org.ph > > Searchable Archives: http://marc.free.net.ph > > . > > To leave, go to http://lists.q-linux.com/mailman/listinfo/plug > > . > > Are you a Linux newbie? To join the newbie list, go to > > http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie -- Alben Benavente Alteza Information Systems Security Administration Information Systems Dept./ Philippine Airlines -- Philippine Linux Users' Group (PLUG) Mailing List [EMAIL PROTECTED] (#PLUG @ irc.free.net.ph) Official Website: http://plug.linux.org.ph Searchable Archives: http://marc.free.net.ph . To leave, go to http://lists.q-linux.com/mailman/listinfo/plug . Are you a Linux newbie? To join the newbie list, go to http://lists.q-linux.com/mailman/listinfo/ph-linux-newbie
