From: Antony Stone <Antony@Soft-Solutions.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: Newbie Question -forcing to pass in squid
Date: Mon, 14 Oct 2002 10:10:25 +0100 [thread overview]
Message-ID: <20021014091027.ROSG459.mta02-svc.ntlworld.com@there> (raw)
In-Reply-To: <1034560988.10075.15.camel@pegasus.gral.com.br>
On Monday 14 October 2002 3:03 am, Flávio Brito wrote:
> Dear Friends
>
> I have two machines, and I trying to force all port 80 traffic to pass
> in SQUID 3128. But when people unset proxy in browser, they bypass SQUID
> to the Internet . I cannot put transparent proxy, because SQUID is
> authenticating.
I don't see why Squid Authentication stops you from setting netfilter to do
transparent proxying.
Anyway, to solve your problem, block access from all machines except your
Squid to external TCP port 80.
iptables -A FORWARD -s ! a.b.c.d -p tcp --dport 80 -o ethx -j DROP
where a.b.c.d is the address of the squid machine and ethx is your external
interface.
Antony.
--
The difference between theory and practice is that
in theory there is no difference, whereas in practice there is.
next prev parent reply other threads:[~2002-10-14 9:10 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-14 2:03 Newbie Question -forcing to pass in squid Flávio Brito
2002-10-14 9:10 ` Antony Stone [this message]
-- strict thread matches above, loose matches on Subject: below --
2002-10-14 4:46 Kevin Saenz
2002-10-14 11:38 ` hare ram
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20021014091027.ROSG459.mta02-svc.ntlworld.com@there \
--to=antony@soft-solutions.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox