From: Askar <askarali@gmail.com>
To: netfilter <netfilter@lists.netfilter.org>
Subject: packets traverse on proxy/firewall
Date: Tue, 11 Jan 2005 10:37:10 +0500 [thread overview]
Message-ID: <a0f69e5050110213739cef613@mail.gmail.com> (raw)
hello masters im configuring firewal + proxy/cache server "squid" both
on the same machine for our client. I gota few question regarding
traverse of packet in this scenrio
Proxy is transparent (interception)
1) packets (port 80 requests) from client will traverse INPUT chain
not FORWARD chain right?
2) squid will fetch the content on behalf of the clients packet leave
cache/firewall machine via OUTPUT chain right?
3) which chains packets will travers when response coming back from
Internet that is Internet ----> Cache --->Clients
Default policies for INPUT, OUTPUT , FORWAD will be DROP in which
chains i have to do filtering in either case i-e
Clients ----->Firewal/cache-----Internet and
Internet --->Firewall/cache----->Clients
regards
Askar
--
(after bouncing head on desk for days trying to get mine working, I'll make
your life a little easier)
next reply other threads:[~2005-01-11 5:37 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-01-11 5:37 Askar [this message]
2005-01-11 6:28 ` packets traverse on proxy/firewall Rob Sterenborg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=a0f69e5050110213739cef613@mail.gmail.com \
--to=askarali@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.