Skip to contentSkip to conversation

by passing transparent proxy

DISCUSSION Askar 2 participants 3 messages Sep 6, 2005

lore
Share & tools
lore

Askar

author
#0 lore raw

hi list

i have a very simple question, we have a transparent proxy "squid" for our users, this machine is also the default gateway for the user. which mean all the traffic of the client do pass from this machine whether its port 80 or not.
All teh port 80 traffic redirected to squid 3128 by ...

$iptables -t nat -A PREROUTING -i eth0 -p tcp -s 0/0 --dport 80 -j REDIRECT --to-port 3128

Now I want to a client -s xx.xx.xx.xx access a site -d xx.xx.xx.xx then his traffic by pass the squid. actaully if the client xx.xx goes through squid while accessing that site then the far end web server gives him permission denied.
However on web server I could only allow the static ip of the client xx.xxbut not the squid server. its a secure web server.

any help in this regards wil be greatly appreciated

regards

askar

Signature · 2 lines
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)
#1 lore raw
Quoted 7 lines · Askar

All teh port 80 traffic redirected to squid 3128 by ...

$iptables -t nat -A PREROUTING -i eth0 -p tcp -s 0/0 --dport 80 -j REDIRECT --to-port 3128

Now I want to a client -s xx.xx.xx.xx access a site -d xx.xx.xx.xx then his traffic by pass the squid. actaully if the client xx.xx goes

Precede the proxy rule with a -j RETURN rule for your -s client.IP and -d server.IP. See the RETURN target in "man iptables".

Signature · 2 lines
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header
author
#2 lore raw
Quoted 7 lines · On 9/6/05, /dev/rob0 <[email protected]> wrote:
Quoted 5 lines · Askar

All teh port 80 traffic redirected to squid 3128 by ...

$iptables -t nat -A PREROUTING -i eth0 -p tcp -s 0/0 --dport 80 -j REDIRECT --to-port 3128

Quoted 10 lines
Quoted 2 lines

Now I want to a client -s xx.xx.xx.xx access a site -d xx.xx.xx.xx then his traffic by pass the squid. actaully if the client xx.xx goes

Precede the proxy rule with a -j RETURN rule for your -s client.IP and -d server.IP. See the RETURN target in "man iptables".
--
mail to this address is discarded unless "/dev/rob0"
or "not-spam" is in Subject: header

bingo :)

thanks mate

Signature · 2 lines
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)