Xin ca'c ba'c va`i xu:
To^i du`ng mo^.t gateway FC4 vo+'i squid va` iptables. Ne^'u ca^'u
hi`nh client vo+'i ddi.a chi? proxy thi` mo.i chuye^.n ok, nhu+ng
ne^'u dde^? cha.y transparent proxy thi` HTTPS kho^ng cha.y ddu+o+.c
(request time out) co`n mo.i thu+' kha'c dde^`u OK. Vi' du.: kho^ng
cha.y gmail ddu+o+.c
(https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&continue=http%3A%2F%2Fgmail.google.com%2Fgmail)
/var/log/squid/access.log cu~ng kho^ng tha^'y entry na`o cho https request.
to^i dda~ cho ma^'y do`ng na`y va`o iptables script nhu+ng xem ra
kho^ng co' ta'c du.ng cho https access:
# Redirect HTTP for a transparent proxy
$IPT -t nat -A PREROUTING -i $LOCAL_IFACE -p tcp --destination-port 80 \
-j REDIRECT --to-ports 8080
# Redirect HTTPS for a transparent proxy - commented by default
$IPT -t nat -A PREROUTING -i $LOCAL_IFACE -p tcp --destination-port 443 \
-j REDIRECT --to-ports 8080
TIA
--
Tri H. Trinh
--------------------------------------------------------
The Linux philosophy is 'Laugh in the face
of danger'. Oops. Wrong One. 'Do it yourself'.
Yes, that's it.
Linus Torvalds
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
VietLUG-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/vietlug-users
