From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ruslan Spivak Subject: REDIRECT question Date: Wed, 02 Jul 2003 13:56:21 +0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3F02BA55.1030504@is.lg.ua> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Hello, netfilter users. i want make transaparent proxy on localhost and want to disabe access after redirecting to port 3128 if destination address in net other then 193.108.240.0/22. Does REDIRECT target send packet to INPUT chain and i should disable access in INPUT chain or should i disable access in '-t nat -A POSTROUTING' chain? iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 Thanks in advance. Your help is very, very appreciated. Best regards, Ruslan