I presume that the squid box is also the gateway for other systems in the LAN because the iptables rule given by you will work in that case only. Have you made an ACL for the LAN hosts and allowed it access through squid ?

For example, if your LAN IP Pool is 192.168.100.0/24, the following lines must be added in squid.conf

acl MyLAN src 192.168.100.0/255.255.255.0
http_access allow MyLAN

The http_access line should be before

http_access deny all

The iptables rule should look like

iptables -t nat -A PREROUTING -p tcp -s 192.168.100.0/24 --dport 80 -j REDIRECT --to-port 8080

Make sure that these hosts are also allowed access to the squid box and through it using

iptables -A INPUT -s 192.168.100.0/24 -j ACCEPT
iptables -A FORWARD -s 192.168.100.0/24 -j ACCEPT

or some appropriate rules

Send me a copy of your squid.conf and iptables rules in case it still doesn't work.

- Manish





# Subodh # wrote:

hi !

i have set the ip forwarding by the command
echo 1 > /proc/sys/net/ipv4/ip_forward
all the lines to be added in squid.conf are there...as normal squid is working fine. the iptables command i have tried is
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080


only thing is that at present all XP clients have been configured for XP ICS features but once i change them for a proxy by giving gateway and port 8080 for proxy they work fine. But then squid is not working in transparent mode. where am i at fault.

regards

Subodh




_______________________________________________
ilugd mailinglist -- [EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/[EMAIL PROTECTED]/

Reply via email to