Dear friends,

I have the following configuration:

  www <------->   [squid]  <------> [internal m/cs]
  {any IP}  {dynamicIP}  {192.168.1.1}   {192.168.1.*}
               ^               ^
               |               |     -----> same here
             ppp0            eth0
Now i try to connect thru IRC or ICQ from internal m/c
and it returns connection failure. i am using squid
squid cache: Version 2.2.STABLE4 version over my linux
box as squid m/c. 
I read up the IPchains document and tried to do the
following  as a naivette.
:input ACCEPT
:forward ACCEPT
:output ACCEPT
:tux -
-A output -s ! 192.168.1.0/255.255.255.0 -d
192.168.1.0/255.255.255.0 -i ppp0 -p
 6
-A tux -s ! 192.168.1.0/255.255.255.0 -d
192.168.1.0/255.255.255.0 -p 1
-A tux -s ! 192.168.1.0/255.255.255.0 -d
192.168.1.0/255.255.255.0 -p 17 -j REDI
RECT 0
-A tux -s ! 192.168.1.0/255.255.255.0 -d
192.168.1.0/255.255.255.0 -p 1
-A tux -s ! 192.168.1.0/255.255.255.0 -d
192.168.1.0/255.255.255.0 -p 17 -j REDI
RECT 0
-A tux -s ! 192.168.1.0/255.255.255.0 -d
192.168.1.0/255.255.255.0 -p 6 -j REDIR
ECT 0
-A tux -s 192.168.1.0/255.255.255.0 -d 0.0.0.0/0.0.0.0
3128:3128 -p 6 -j REDIREC
T 0
-A tux -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 3128:3128
-p 6 -t 01 10

This basically means i am passing all packets from the
internal network to squid to forward it. I have tried
"transparent proxying". as explained in the ipchains
document. 

But still none of these services r working??? 

can someone help. 


I am also trying to get the dialpad working on the
help given on the site. unfortunately there ipfwadm
has to be used.. but ipchains and ipfwadm cannot be
used together!!!

i have not yet located a good help on ipfwadm..
-regds,
rasane_shailesh.


__________________________________________________
Do You Yahoo!?
Send instant messages & get email alerts with Yahoo! Messenger.
http://im.yahoo.com/

To subscribe / unsubscribe goto the site www.ilug-bom.org ., click on the mailing list 
button and fill the appropriate information 
and submit. For any other queries contact the ML maintener

Reply via email to