Re: Shorewall and squid transparent proxy problem

2011-04-05 Thread Diego Xirinachs
Thanks a lot for your input, to answer your questions and clarify further, - I had the ACCEPT rule before the REDIRECT one before asking for help, and didnt work also, will change it back and leave it like that, so rules order would be: ACCEPT$FWnettcpwww REDIREC

Re: Shorewall and squid transparent proxy problem

2011-04-05 Thread Николай Федосов
06.04.2011 01:43, Diego Xirinachs пишет: DNS is already accepted on my shorewall rules file, here is the complete file, I dont know why I didnt post it complete earlier. REDIRECTloc3128tcpwww- ACCEPT$FWnettcpwww ACCEPT

Re: Shorewall and squid transparent proxy problem

2011-04-05 Thread Diego Xirinachs
DNS is already accepted on my shorewall rules file, here is the complete file, I dont know why I didnt post it complete earlier. # #ACTIONSOURCEDESTPROTODESTS

Re: Shorewall and squid transparent proxy problem

2011-04-05 Thread Николай Федосов
My proposal is to change the order of your rules... But the true way is to : apt-get purge shorewall (it is very complicated, more complicatated than iptables) 05.04.2011 13:29, Diego Xirinachs пишет: >> My /etc/shorewall/rules are setup with this ACCEPT and REDIRECT rules: >> >> #ACTION SOU

Re: [Oneiric-Topic] Revisit Xen support

2011-04-05 Thread Jorge Armando Medina
On 04/01/2011 06:05 PM, Raphaël Pinson wrote: > On Sat, Apr 2, 2011 at 1:51 AM, Clint Byrum wrote: >> Excerpts from Chuck Short's message of Wed Mar 30 07:27:50 -0700 2011: >>> Hi, >>> >>> In the past Xen support in Ubuntu as a host has been difficult for a >>> variety of reasons most notably no u

Re: [Oneiric-Topic] Puppet Integration

2011-04-05 Thread Mathias Gug
On Thu, Mar 31, 2011 at 7:16 PM, Clint Byrum wrote: > Excerpts from Mark Foster's message of Thu Mar 31 14:52:00 -0700 2011: >> On 03/31/2011 10:36 AM, Chuck Short wrote: >> > Puppet installs over apt-get and takes editing a quick >> >> /etc/default/puppet file to say YES to enable it (rather than

Re: [Oneiric-Topic] Server Boot

2011-04-05 Thread Louis RUPPERT
On 30.03.2011 01:12, Scott Kitterman wrote: > There was a lot of discussion around improving the server boot experience > before the UDS-M. A number of people expressed interest in seeing more > useful > diagnostic information during boot. Others expressed concerns with boot > reliability on

Re: Shorewall and squid transparent proxy problem

2011-04-05 Thread DULMANDAKH Sukhbaatar
You need to allow outgoing DNS requests to make squid work properly. On 5 Apr 2011 07:08, "Diego Xirinachs" wrote: > Hi all, speaking of gateways and shorewall, I bumped into a problem today > with it. I have a 10.04 LTS server setup at a small office running shorewall > and squid, clients are co

Re: Shorewall and squid transparent proxy problem

2011-04-05 Thread Diego Xirinachs
Forget my ignorance. How do I show those IP tables you want? I thought that shorewall's job was to configure the iptables in an easy way. Isn't it? Also, according to shorewall's documentation, it is correct to put the destination port there. I double checked it by running "sudo shorewall check" a