On Sun, 2003-11-30 at 13:20, Tarhon-Onu Victor wrote:
> On Sun, 30 Nov 2003, KobrAs wrote:
> 
> >  la nebunie. Am instalat linux-ul (redhat 9) am setat squid-ul,
> > pana aici totu` OK, dar dupa ce am pus pe router regulile la iptables
> > ... imi moare explorer-ul
> > iptables -t nat -A PREROUTING -i eth1 -p tcp --destination-port 80
> >  -j DNAT --to-destination 192.168.1.254:8080
> > iptables -t nat -A PREROUTING -i eth1 -p tcp --destination-port 443
> >  -j DNAT --to-destination 192.168.1.254:8081
> 
>       Probabil ai 2 squid-uri, unul care merge pe 8080 si unul pe 
> 8081. Probabil ca intr-unul ai http_accel_port 80 si in celalalt 443. In 
> cazul asta liniile de mai jos ce fac?
> 
> > iptables -t nat -A PREROUTING -i eth1 -p tcp --destination-port 445
> >  -j DNAT --to-destination 192.168.1.254:8081
> > iptables -t nat -A PREROUTING -i eth1 -p tcp --destination-port 3128
> >  -j DNAT --to-destination 192.168.1.254:8080
> > iptables -t nat -A PREROUTING -i eth1 -p tcp --destination-port 1080
> >  -j DNAT --to-destination 192.168.1.254:8080
> > 8080 fiind port-ul http
> > si 8081 fiind port-ul https
> > m-am chinuit toata noaptea si nu am reusit... daca pun normal proxy
> > ip:port merge best ... dar redirect-ul nu prea vrea
> 
>       Poate ai uitat ceva despre headere, http_accel_host virtual, sau 
> treburi dintr-astea.

sau ca squid nu prea merge cu SSL, ceea ce s-ar fi dedus usurel cu un
man gogule.

http://www.mail-archive.com/[EMAIL PROTECTED]/msg07554.html

Squid-2.5.STABLE won't do this as it does not know how to initiate SSL 
connections to other servers.

Squid-2.5 + SSL update patch will.

> Is it true that squid 3.0dev will do what I need?

Yes, but it is not very stable at the moment..

BTW: "exploreru" e un browser de kkt care merita sa moara oricum /troll



--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui