[K12OSN] transparent-proxying (again)

Peter Hartmann ascensiontech at gmail.com
Wed Feb 20 23:04:52 UTC 2008


What's odd is that after starting the transparent-proxing service,
iptables -L shows no rules at all.

[root at k12linux ~]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

I've tried it by hand.
/sbin/iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128

An interesting note is that the machines that can't get past the k12
server are getting dns forwarded to them ok.

[root at smart1ltsp ~]# ping google.com
PING google.com (64.233.167.99) 56(84) bytes of data.

--- google.com ping statistics ---
15 packets transmitted, 0 received, 100% packet loss, time 13998ms

I did change the public interface a while back.  I've changed the
PUBLIC_ETHERNET variable to the correct one in the /etc/init.d/nat
service.  Do i need to change it somwhere else too?

Any ideas?

Thanks,
Peter




More information about the K12OSN mailing list