Skip to contentSkip to conversation

how to by pass yahoo mail and hotmail

DISCUSSION Askar Ali 2 participants 3 messages Jul 6, 2006 – Jul 7, 2006

lore
Share & tools
lore

Askar Ali

author
#0 lore raw

Hi list,

we are redirecting port 80 traffic from our firewall to our proxy/cache servers with iptables + iproute2 ie
#ip rule add fwmark 9 table cache.out
#ip route add default via xxx.xxx.xx.xx dev eth0 table cache.out #ip route flush cache

iptables -A PREROUTING -i eth0 -t mangle -s xxx.xxx.xx.0/24 -p tcp --dport 80 -j MARK --set-mark 9

Everythign working fine, now a question is how to -j Return yahoo mail and hotmail traffic from going to proxy servers so that yahoo mail and hotmail see the orginal IP of the client not the IP of squid server.

yahoo mail and hotmail resolve to multiple IPs if I add a -J Return rule before or after the above rule its not working say...

iptables -A PREROUTING -i eth0 -t mangle -s xxx.xxx.xx.0/24 -d mail.yahoo.com -p tcp --dport 80 -j MARK --set-mark 9

Any help in this regards will be greatly apprecaited.

Regards,

#1 lore raw

#hotmail
iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 65.52.0.0/14 --dport 80 -j RETURN
iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 207.46.0.0/16 --dport 80 -j RETURN
#yahoo
iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 206.190.32.0/19 --dport 80 -j RETURN
#
# By passing waridtel.com from cache/proxy servers
iptables -A PREROUTING -t mangle -i eth0 -p tcp -d 203.124.26.20 -j RETURN #

Quoted 26 lines · Askar Ali

Hi list,

we are redirecting port 80 traffic from our firewall to our proxy/cache servers with iptables + iproute2 ie
#ip rule add fwmark 9 table cache.out
#ip route add default via xxx.xxx.xx.xx dev eth0 table cache.out #ip route flush cache

iptables -A PREROUTING -i eth0 -t mangle -s xxx.xxx.xx.0/24 -p tcp --dport 80 -j MARK --set-mark 9

Everythign working fine, now a question is how to -j Return yahoo mail and hotmail traffic from going to proxy servers so that yahoo mail and hotmail see the orginal IP of the client not the IP of squid server.

yahoo mail and hotmail resolve to multiple IPs if I add a -J Return rule before or after the above rule its not working say...

iptables -A PREROUTING -i eth0 -t mangle -s xxx.xxx.xx.0/24 -d mail.yahoo.com -p tcp --dport 80 -j MARK --set-mark 9

Any help in this regards will be greatly apprecaited.

Regards,

Signature · 4 lines
Syed Kashif Ali Bukhari
+92-300-4295604
Network Engineer
Beaconhouse IT Services, Lahore Pakistan
author
#2 lore raw
Quoted 15 lines · Kashif Ali Bukhari, on 07/07/2006 06:58 PM [GMT+500], wrote :

#hotmail
iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 65.52.0.0/14 --dport 80 -j RETURN
iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 207.46.0.0/16 --dport 80 -j RETURN
#yahoo
iptables -A PREROUTING -i eth0 -t mangle -p tcp -d 206.190.32.0/19 --dport 80 -j RETURN
#
# By passing waridtel.com from cache/proxy servers iptables -A PREROUTING -t mangle -i eth0 -p tcp -d 203.124.26.20 -j RETURN
#

Quoted 32 lines
Quoted 29 lines · Askar Ali

Hi list,

we are redirecting port 80 traffic from our firewall to our proxy/cache servers with iptables + iproute2 ie
#ip rule add fwmark 9 table cache.out
#ip route add default via xxx.xxx.xx.xx dev eth0 table cache.out #ip route flush cache

iptables -A PREROUTING -i eth0 -t mangle -s xxx.xxx.xx.0/24 -p tcp --dport
80 -j MARK --set-mark 9

Everythign working fine, now a question is how to -j Return yahoo mail and
hotmail traffic from going to proxy servers so that yahoo mail and hotmail
see the orginal IP of the client not the IP of squid server.

yahoo mail and hotmail resolve to multiple IPs if I add a -J Return rule before or after the above rule its not working say...

iptables -A PREROUTING -i eth0 -t mangle -s xxx.xxx.xx.0/24 -d mail.yahoo.com -p tcp --dport 80 -j MARK --set-mark 9

Any help in this regards will be greatly apprecaited.

Regards,

Kashif thanks I very much appreciate it. :)

Regards, Askar