iptables-save! o que falta para squid?

no_identity99
(usa Fedora)

Enviado em 04/03/2009 - 13:03h

boas,
o que esta faltando para redirecionar para porta do squid?
deixo aqui o meu iptables-save:

# Generated by iptables-save v1.3.5 on Wed Mar 4 15:50:39 2009
*mangle
:PREROUTING ACCEPT [118835:22355317]
:INPUT ACCEPT [117390:22173214]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [170570:46644456]
:POSTROUTING ACCEPT [170570:46644456]
COMMIT
# Completed on Wed Mar 4 15:50:39 2009
# Generated by iptables-save v1.3.5 on Wed Mar 4 15:50:39 2009
*filter
:INPUT ACCEPT [65782:11612530]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [183589:69235627]
-A INPUT -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 3128 -j ACCEPT
COMMIT
# Completed on Wed Mar 4 15:50:39 2009
# Generated by iptables-save v1.3.5 on Wed Mar 4 15:50:39 2009
*nat
:PREROUTING ACCEPT [5293:859104]
:POSTROUTING ACCEPT [137:8383]
:OUTPUT ACCEPT [3795:234396]
-A PREROUTING -s 192.168.0.0/255.255.255.0 -p udp -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTROUTING -j MASQUERADE
-A POSTROUTING -o eth1 -j MASQUERADE
-A POSTROUTING -o eth1 -j MASQUERADE
COMMIT
# Completed on Wed Mar 4 15:50:39 2009

maninhx
(usa Slackware)

Enviado em 10/03/2009 - 22:49h

#iptables -t nat -A PREROUTING -s 0/0 -p tcp --dport 80 -j REDIRECT --TO-PORT 3128


desde que seu squid fique na porta padrao dele 3128.

pelo
(usa Debian)

Enviado em 10/03/2009 - 23:20h

A regra está correta, mas é interessante fazer um filtro nessa regra.

em -s 0/0, colocar a tua rede interna como:

-s 192.168.0.0/24 (rede/mascara)

Sérgio Abrantes
[]'s