[K12OSN] iptables and prerouting for squid

Adam Melancon adammelancon at gmail.com
Tue Nov 16 02:54:40 UTC 2004


Well, on my box I only have one network card eth0
I'm using this as a squidguard only box.

If you are using the two network card senario, look at
http://k12ltsp.org/install.html
eth1 is the internet, and eth0 is the terminal side.


On Mon, 15 Nov 2004 20:35:38 -0500, Cory Cartwright
<corycartwright at sbcglobal.net> wrote:
> Sorry if this is a dumb question, but is eth0 you internal LAN? Maybe
> instead specify the address -s 172.x.x.x/xx  (put your subnet in) and
> remove -i eth0
> 
> Cory
> 
> 
> 
> On Mon, 2004-11-15 at 16:31, KJ wrote:
> > Hi Adam,
> > Yes I have tried that.  I'm sorry I should have mentioned that.  It
> > makes no difference.
> > BTW - your howto on the website was most helpful, thanks for your work!
> > KJ
> >
> >
> > Adam Melancon wrote:
> >
> > >Did you try flushing all of the tables first
> > >iptables -t nat -F
> > >iptables -F
> > >Then
> > >/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j
> > >REDIRECT --to-port 3128
> > >
> > >
> > >On Mon, 15 Nov 2004 16:22:46 -0500, KJ <ksj2010 at myrealbox.com> wrote:
> > >
> > >
> > >>Hello all,
> > >>I FINALLY have squid/squidguard working.  If I enter 127.0.0.1 port 3128
> > >>as my proxy, everything works fine.  The issue that I am having (the
> > >>last before deployment, I think) is that I can't get iptables to route
> > >>all traffic to port 3128.
> > >>When I reinstalled K12 LTSP I made sure to initiate a firewall.  Now I
> > >>have entries in iptables for the RH-Firewall chain.  When I enter:
> > >>
> > >>iptables - t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
> > >>--to-port 3128
> > >>
> > >>nothing happens.  I've tried flushing and re-entering the above
> > >>statement, still nothing.
> > >>
> > >>Any help would be greatly appreciated.
> > >>Thanks!
> > >>KJ
> > >>
> > >>_______________________________________________
> > >>K12OSN mailing list
> > >>K12OSN at redhat.com
> > >>https://www.redhat.com/mailman/listinfo/k12osn
> > >>For more info see <http://www.k12os.org>
> > >>
> > >>
> > >>
> > >
> > >
> > >
> > >
> > 
> > _______________________________________________
> > K12OSN mailing list
> > K12OSN at redhat.com
> > https://www.redhat.com/mailman/listinfo/k12osn
> > For more info see <http://www.k12os.org>
> 
> _______________________________________________
> 
> 
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
> 


-- 
Adam Melancon
Work: http://www.vermilion.lib.la.us
Personal: http://www.melancon.org




More information about the K12OSN mailing list