Iptables usage

Iptables usage

[Wei Ming Long]

Hi everyone,
I need your helpfollowed the instructions in "Transparent Proxy with Linux
and Squid
mini-HOWTO" but when my client machines specify 'direct connection' or 'do
not
use proxy' in their network settings, the transparent proxy doesn't workly
when my client machines specify a proxy other than my own proxy, then the
transparent proxy works. Why is this so? 

Please help. Thanks.

Best regards
Matthew

Re: Iptables usage

[Henrik Nordstrom]

On Mon, 20 Oct 2003, Wei Ming Long wrote:

> followed the instructions in "Transparent Proxy with Linux and Squid
> mini-HOWTO" but when my client machines specify 'direct connection' or
> 'do not use proxy' in their network settings, the transparent proxy
> doesn't workly when my client machines specify a proxy other than my own
> proxy, then the transparent proxy works. Why is this so?

You probably have a higher chance of getting help with this question by 
asking in the squid-users forum. Also try reading the Squid FAQ section on 
interception caching.

For information regarding the Squid mailinglists see 
http://www.squid-cache.org/mailing-lists.html

Regards
Henrik Nordstrom
Squid HTTP Proxy project

tools to modifiy the conntrack?

[Sylvain BERTRAND]

Hi,

I've got conntrack support in my 2.4.21 kernel. I'd like to flush it
sometime, or at least delete a few lines.
I'm not very excited about editing /proc/net/ip_conntrack by hand... So I'm
wondering if there's anything the root can do to modify the conntrack (are
there parameters somewhere?).

Thanks

Sylvain

Re: tools to modifiy the conntrack?

[Henrik Nordstrom]

On Mon, 20 Oct 2003, Sylvain BERTRAND wrote:

> I've got conntrack support in my 2.4.21 kernel. I'd like to flush it
> sometime, or at least delete a few lines.

This is a area somewhat lacking at this time.

There is ongoing development adding support for this, available both in 
p-o-m and separately. Look for ctnetlink.

> I'm not very excited about editing /proc/net/ip_conntrack by hand...

You can't. It is read-only.

Regards
Henrik