All of lore.kernel.org
 help / color / mirror / Atom feed
* [LARTC] iptables+iproute2+squid
@ 2001-09-23 19:04 Martin Kellner
  2001-09-23 20:07 ` Stephane Bortzmeyer
  2001-09-26  7:12 ` Martin H. Kellner
  0 siblings, 2 replies; 3+ messages in thread
From: Martin Kellner @ 2001-09-23 19:04 UTC (permalink / raw)
  To: lartc

[-- Attachment #1: Type: text/plain, Size: 1184 bytes --]

I think this is the right place to ask:

I'm using
- kernel 2.4.9
- iptables as firewall
- iproute2 with rule-based routing.
- squid

two internet-connection:

- 1 ADSL-based link with dynamic ip-adresses
- 1 static isdn-line with fixed ip-adresses

Everything is working but squid isn't. Any idea why? how is the
loopback-traffic handled with my two new tables? Squid uses to work as a
transparent-proxy with all the iptables-stuff. When I'm working with the
normal routing-tables and one internet-connection. Everything is ok.

I use two rules (first for user-browsing, second for mail-traffic):

ip rule add from 192.168.1.128/25 table www.out
ip rule add from 192.168.1.6 table mail.out

# default route is reset to p-t-p-adress of ppp, when ppp comes down again,
because of idle-state
ip route delete default

# this part is done dynamically when ppp comes up
ip route add default via x.x.x.x table www.out
ip route add 192.168.1.0 via y.y.y.y table www.out

# this part is setup with the firewall start
ip route add default via z.z.z.z table mail.out
ip route add 192.168.1.0 via y.y.y.y table mail.out

Thanks in advance

Martin Kellner


[-- Attachment #2: Type: text/html, Size: 1694 bytes --]

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2001-09-26  7:12 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2001-09-23 19:04 [LARTC] iptables+iproute2+squid Martin Kellner
2001-09-23 20:07 ` Stephane Bortzmeyer
2001-09-26  7:12 ` Martin H. Kellner

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.