Linux Netfilter discussions
 help / color / mirror / Atom feed
From: marcus <marcus@lanhelp.com.br>
To: netfilter@lists.netfilter.org
Subject: mangle squid packets
Date: Fri, 01 Jul 2005 17:31:17 -0300	[thread overview]
Message-ID: <42C5A815.8040301@lanhelp.com.br> (raw)

Hi, I've managed to work a 3 gateway linux router using this mangle rule
to mark local net incoming packets:

iptables -A PREROUTING -t mangle -s 10.0.0.0/8 -d 0/0 -j MARK --set-mark 3

Works, great. But i cant do the same with squid activated, I'm using
transparent proxy:

iptables -t nat -A PREROUTING -i eth0 -p TCP --dport 80 -j REDIRECT
--to-port 3128

I dont know what mangle rule I need to mark squid transparent packets, I
have tried all the following (One at a time):

        iptables -A PREROUTING -t mangle -s 10.0.0.0/8 -d 0/0 -j MARK
--set-mark 3
        iptables -A PREROUTING -t mangle -s 127.0.0.1 -d 0/0  -j MARK
--set-mark 3
        iptables -A PREROUTING -t mangle -p tcp --dport 80 -j MARK
--set-mark 3
        iptables -A PREROUTING -t mangle -p tcp --dport 3128 -j MARK
--set-mark 3

Any ideas??

Thanks.

-- 
<http://www.lanhelp.com.br> 	Atenciosamente,
Marcus Leandro
Suporte / Consultoria
marcus@lanhelp.com.br


             reply	other threads:[~2005-07-01 20:31 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-07-01 20:31 marcus [this message]
2005-07-05 11:49 ` mangle squid packets Jan Engelhardt
2005-07-05 18:18   ` Askar
2005-07-05 20:32     ` Jan Engelhardt

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=42C5A815.8040301@lanhelp.com.br \
    --to=marcus@lanhelp.com.br \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox