Tinha tentado do jeito que vc mandou e tb n�o funcionou... Descobri uma coisa. Quando venho pela rede interna, beleza. Quando venho pela Embratel, nada ! Quando ativo o redir e testo via Embratel, funciona !
Em tempo, tenho dois gateways: 192.168.0.1 - Embratel 192.168.0.2 - Brasil Telecom Abaixo, copy do status do iptables e do script que vc me mandou... Parece tudo OK, mas n�o vai... --- Table: nat Chain PREROUTING (policy ACCEPT) target prot opt source destination DNAT tcp -- anywhere 10.0.0.139 tcp dpt:ica to:192.168.0.243 REDIRECT tcp -- 192.168.0.0/24 anywhere multiport dports http,https redir ports 3128 Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT tcp -- 192.168.0.243 anywhere tcp spt:ica to:10.0.0.139 MASQUERADE all -- 192.168.0.0/24 anywhere MASQUERADE all -- 192.168.0.0/24 anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Table: filter Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination --- echo 1 > /proc/sys/net/ipv4/ip_forward modprobe ip_conntrack_ftp modprobe ip_nat_ftp modprobe iptable_nat iptables -t nat -F iptables -F iptables -A FORWARD -s 0/0 -d 0/0 -j ACCEPT iptables -A PREROUTING -t nat -d 10.0.0.139 -p tcp --dport 1494 -j DNAT --to 192.168.0.243 iptables -A POSTROUTING -t nat -s 192.168.0.243 -p tcp --sport 1494 -j SNAT --to 10.0.0.139 iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -j MASQUERADE # Squid iptables -t nat -A POSTROUTING -s 192.168.0.0/255.255.255.0 -d 0/0 -j MASQUERADE iptables -t nat -A PREROUTING -p tcp -m multiport -s 192.168.0.0/255.255.255.0 --dport 80,443 -i eth0 -j REDIRECT --to-ports 3128 --- --------------------------------------------------------------------------- Esta lista � patrocinada pela Conectiva S.A. Visite http://www.conectiva.com.br Arquivo: http://bazar2.conectiva.com.br/mailman/listinfo/linux-br Regras de utiliza��o da lista: http://linux-br.conectiva.com.br FAQ: http://www.zago.eti.br/menu.html
