Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Ryan Beisner <ryanb@thedataarc.com>
To: netfilter@lists.netfilter.org
Subject: Overriding REDIRECT for certain hosts (SQUID)
Date: 23 Nov 2002 09:46:19 -0600	[thread overview]
Message-ID: <1038066385.4859.12.camel@rbhome> (raw)
In-Reply-To: <20021123052657.30417.33449.Mailman@kashyyyk>


I don't know if anyone else has noticed, but SQUID doesn't treat some
websites very kindly in its http acceleration (transparent proxy). 
Mainly, Microsoft Outlook Webmail (I have a client using it).

[ BTW this is a strange breed of a web based mail system .. it looks
like you're using Outlook, within a webpage, released by MS.  Their
firewall info claims that HTTP is the only protocol in use. ]

I have already configured Squid not to cache that entire domain, and it
doesn't cache it.  I've flushed the cache, then looked at the "All Cache
Objects" SQUID report, to find none at domain XYZZZ.COM.

OK, so how would one turn this rule around into a couple of rules that
redirect port 80 to 3128, *unless* it's to/from "any-host.xyzzz.com" or
"any-host.anotherdomain.com"  etc ?


.......................}SNIP{...........................
$ipt -t nat -A PREROUTING -i $eth0 -p tcp --dport 80 -j REDIRECT
--to-port 3128
.......................}SNIP{...........................


I realize I could create a rule based on their IP range, but I want the
rule to be based on the domain name -- I haven't yet seen that in
action.  ;}


All help is appreciated!  

TIA

-Ryan Beisner





       reply	other threads:[~2002-11-23 15:46 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <20021123052657.30417.33449.Mailman@kashyyyk>
2002-11-23 15:46 ` Ryan Beisner [this message]
2002-11-23 16:05   ` Overriding REDIRECT for certain hosts (SQUID) Cedric Blancher
2002-11-23 18:03   ` Karina
2002-11-24 20:19   ` Filip Sneppe (Cronos)

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1038066385.4859.12.camel@rbhome \
    --to=ryanb@thedataarc.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox