From: Georgi Alexandrov <georgi.alexandrov@gmail.com>
To: dhottinger@harrisonburg.k12.va.us
Cc: "netfilter@lists.netfilter.org" <netfilter@lists.netfilter.org>
Subject: Re: redirect
Date: Wed, 07 Mar 2007 18:14:21 +0200 [thread overview]
Message-ID: <45EEE4DD.9090508@gmail.com> (raw)
In-Reply-To: <20070306094208.csonro2nwc8kogso@webmail.harrisonburg.k12.va.us>
[-- Attachment #1: Type: text/plain, Size: 864 bytes --]
dhottinger@harrisonburg.k12.va.us wrote:
> I currently redirect all traffic on port 80 to my proxy server with
> $IPC -t nat -A PREROUTING -p tcp -i ! $IF --dport 80 -s !
> 204.111.40.0/24 -d ! 204.111.40.0/24 -j DNAT --to-destination
> $PROXY_IP:8080
>
> I would like to have any traffic destined for apple.com excluded from
> this redirect. I cant seem to get the syntax right. Anyone got any ideas?
<snip*>
iptables -t nat -A PREROUTING -p tcp -i $iface --dport 80 -d $apples_net
-j RETURN
iptables -t nat -A PREROUTING -p tcp -i $iface --dport 80 -d
$another_not_to_proxy_network -j RETURN
iptables -t nat -A PREROUTING -p tcp -i $iface --dport 80 -j DNAT --to
$proxy:$port
--
regards,
Georgi Alexandrov
key server - pgp.mit.edu :: key id - 0x37B4B3EE
Key fingerprint = E429 BF93 FA67 44E9 B7D4 F89E F990 01C1 37B4 B3EE
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
next prev parent reply other threads:[~2007-03-07 16:14 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-03-06 14:42 redirect dhottinger
2007-03-07 16:14 ` Georgi Alexandrov [this message]
2007-03-07 16:43 ` redirect dhottinger
2007-03-07 16:50 ` redirect dhottinger
2007-03-08 7:01 ` redirect Georgi Alexandrov
2007-03-08 11:34 ` redirect dhottinger
2007-03-08 14:50 ` redirect (nfcan: addressed to exclusive sender for this address) Jim Laurino
2007-03-08 14:58 ` dhottinger
2007-03-09 15:07 ` Georgi Alexandrov
-- strict thread matches above, loose matches on Subject: below --
2007-03-02 12:41 redirect dhottinger
2007-03-02 12:51 ` redirect TheGesus
2005-05-13 14:28 redirect ngabor
2004-12-13 13:36 REDIRECT r00t
2004-12-13 14:11 ` REDIRECT Meg
2004-12-13 15:59 ` REDIRECT Henrik Nordstrom
2004-12-13 8:05 REDIRECT r00t
2004-12-13 10:23 ` REDIRECT Henrik Nordstrom
2003-08-07 21:53 REDIRECT George Vieira
2003-08-07 19:22 REDIRECT Juliano Murlick
2003-08-07 17:37 REDIRECT Juliano Murlick
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=45EEE4DD.9090508@gmail.com \
--to=georgi.alexandrov@gmail.com \
--cc=dhottinger@harrisonburg.k12.va.us \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.