From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tobias DiPasquale Subject: Re: Blocking Direct outgoing connections to port 80 Date: Mon, 27 Jun 2005 08:58:04 -0400 Message-ID: <876ef97a050627055863a7e303@mail.gmail.com> References: <6c2d1c9d05062705301afcf744@mail.gmail.com> Reply-To: Tobias DiPasquale Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <6c2d1c9d05062705301afcf744@mail.gmail.com> Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: shardul Adhikari Cc: netfilter@lists.netfilter.org On 6/27/05, shardul Adhikari wrote: > Hi list, > I want to block direct connections comming to port 80 from my network > , but allow them connections via proxy port 8080 , how to go about it. >=20 > Thanks in Advance. The LARTC cookbook shows how to do this: http://lartc.org/howto/lartc.cookbook.squid.html This is a little old (it uses ipchains for some things) but you should be able to figure out how to update it for use with iptables. --=20 [ Tobias DiPasquale ] 0x636f6465736c696e67657240676d61696c2e636f6d