Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Igor Popov <igor@garant.koenig.ru>
To: tedkaz@optonline.net
Cc: netfilter@lists.netfilter.org
Subject: Re: REDIRECT to localhost
Date: Tue, 17 Aug 2004 13:02:30 +0200	[thread overview]
Message-ID: <200408171302.30699.igor@garant.koenig.ru> (raw)
In-Reply-To: <1092654950.27598.13.camel@tarkus>


> > Hi All,
> > I have server, that connects my localnet to inet, clients connects to me
> > via PPPoE (ppp[1-9]). I want to run squid on localhost and I want my
> > clients to connect to it.
> >
> > Can somebody help me with redirect rules?
> >
> >
> >
> > Igor Popov <igorpopov@newmail.ru>
> > icq 241601876


> iptables -t nat -A PREROUTING -i "name of interface" -p tcp -m tcp --
> dport 80 -j REDIRECT --to-ports 3129
>
> If your default policy is to DROP all INPUT/FORWARD as is it should be.
>
>
> iptables -A INPUT -i "name of interface" -p tcp -m tcp --dport 80 -j
> ACCEPT
>


As I know, REDIRECT target redirects to the same iface, but on another port. I 
can run squid on ppp iface, because it is created dynamically and I don't 
want it to listen on all addresses. I have tried to use REDIRECT and DNAT, 
but without any success.  Now I have created alias for eth0 with ip that lies 
in the same subnet as ppp[1-9] and run squid on it.
May be my problem in antispoofing filter?


-- 
"You have been in Afghanistan, I perceive."
		-- Sir Arthur Conan Doyle, "A Study in Scarlet"



  reply	other threads:[~2004-08-17 11:02 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-08-16  8:24 REDIRECT to localhost Попов Игорь Николаевич 
2004-08-16 11:15 ` Ted Kaczmarek
2004-08-17 11:02   ` Igor Popov [this message]
2004-08-18  1:21     ` Cedric Blancher
2004-08-18 12:22       ` Ted Kaczmarek
  -- strict thread matches above, loose matches on Subject: below --
2004-08-16 11:23 igorpopov
2004-08-16 14:17 Jason Opperisano
2004-08-18 12:37 Jason Opperisano
2004-08-18 13:41 ` Cedric Blancher
2004-08-18 13:47   ` Cedric Blancher

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200408171302.30699.igor@garant.koenig.ru \
    --to=igor@garant.koenig.ru \
    --cc=netfilter@lists.netfilter.org \
    --cc=tedkaz@optonline.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox