Re: REDIRECT to localhost

[Ted Kaczmarek <tedkaz@optonline.net>]

On Wed, 2004-08-18 at 03:21 +0200, Cedric Blancher wrote:
> Le mar 17/08/2004 à 13:02, Igor Popover a acrid :
> > As I know, REDIRECT target redirects to the same if ace, but on another port.
> 
> Nope.
> REDIRECT target redirects to lo interface, on the port you want.
> 
> > I can run squid on PP if ace, because it is created dynamically and I don't 
> > want it to listen on all addresses.
> 
> Just have it run on 127.0.0.1, port 3128, and configure it as a
> transparent proxy (see Squid doc).
> 
> > I have tried to use REDIRECT and DAT, but without any success.
> 
> And finally try this :
> 
> 	iptables -t nat -A PREROUTING -p tcp --dport 80 \
> 		-j REDIRECT --to-ports 3128

As long as you want ALL port 80 traffic hitting your squid. Otherwise
much better to be specific to interface or even ip block(s). Not a good
idea to be mixing squid for internal use with external accelerator usage
IMHO.
> 
> Should work.
> 
> 
Ted