From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Dharmendra.T" Subject: Re: Blocking Squid Requests Date: 09 May 2003 09:43:47 +0530 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1052453632.1070.1.camel@india> References: <001801c31490$fd031670$7107a8c0@maninho> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=-I7NSE4Ihst56kt7psxQt" Return-path: In-Reply-To: <001801c31490$fd031670$7107a8c0@maninho> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Walter Priesnitz Filho Cc: IPTables --=-I7NSE4Ihst56kt7psxQt Content-Type: text/plain Content-Transfer-Encoding: 7bit Hi, It is better to add the acls on the squid than on the firewall. Proxy servers will give good performance compared to the firewalls in acls. Regards Dharmu On Wed, 2003-05-07 at 17:35, Walter Priesnitz Filho wrote: Hi, I have this environment, a subnetwork (192.168.0.0) that access another subnetwork (192.168.59.0) and then access the internet. The second lan has a proxy server (squid:3128). I need to block the requests in th first lan to the squid server to some sites. How can I do this? I've tried this iptables -A FORWARD -p tcp -m multiport --dport 80,443,3128 -d www.someplace.com -j DROP but doesn't work. Can anybody help-me? Regards, Walter -------------------------------------------- Walter Priesnitz Filho - UIN 121745902 http://camva.ucs.br/~walterp/ Linux user 268789 - http://counter.li.org/ -------------------------------------------- --=-I7NSE4Ihst56kt7psxQt Content-Type: text/html; charset=utf-8 Hi,

It is better to add the acls on the squid than on the firewall. Proxy servers will give good performance compared to the firewalls in acls.

Regards
Dharmu

On Wed, 2003-05-07 at 17:35, Walter Priesnitz Filho wrote:

Hi,
I have this environment, a subnetwork (192.168.0.0) that access another
subnetwork (192.168.59.0) and then access the internet. The second lan has a
proxy server (squid:3128).
I need to block the requests in th first lan to the squid server to some
sites. How can I do this?
I've tried this
iptables  -A FORWARD -p tcp -m multiport --dport 80,443,3128 -d
www.someplace.com -j DROP
but doesn't work.
Can anybody help-me?

Regards,
      Walter
--------------------------------------------
  Walter Priesnitz Filho - UIN 121745902
  http://camva.ucs.br/~walterp/
  Linux user 268789 - http://counter.li.org/
--------------------------------------------

--=-I7NSE4Ihst56kt7psxQt--