Dear Animesh, I tried ur rules, but it didn't work, i am using squid as my proxy server, also i use a dial-up modem to connect to internet, i have given this set of iptables rules, pls check them.
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128 iptables -A FORWARD -s 10.1.0.0/16 -p tcp -j ACCEPT iptables -t nat -A POSTROUTING -s 10.1.0.0/16 -o ppp0 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp -s 0/0 --dport 21 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp -d 0/0 --dport 20 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp --dport 25 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp --dport 22 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp --dport 23 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp --dport 110 -j MASQUERADE iptables -t nat -A POSTROUTING -p tcp --dport 443 -j MASQUERADE Thanks, Rajendra Animesh Singh wrote: > --- "Dileep M. Kumar" <[EMAIL PROTECTED]> wrote: > > On Tue, Jun 15, 2004 at 09:52:07PM -0700, Animesh > > Singh wrote: > > > > >>>/sbin/iptables -t nat -A POSTROUTING -o eth0 -j > > MASQUERADE > > > > Instead of MASQUERADE use SNAT. IAC, MASQUERADE is > > meant for non static > > ips like dialup, dhcp etc. > <snip> > MASQUERADE is intended for use with dynamic addresses. > The other thing that it does differently is that if > the link goes down, entries in the nat table will be > dropped with MASQUERADE. If you're using SNAT, the > entries stay in the table in case the link comes back > up momentarily. This makes sense for MASQUERADE, > because when the link comes back up, the address will > (could) be different anyway, so the connections won't > ever be resumed. > > SNAT use more overhead, since it seeks the external IP > every time a chain is traversed. > > Regards, > Animesh. > > > > __________________________________ > Do you Yahoo!? > New and Improved Yahoo! Mail - Send 10MB messages! > http://promotions.yahoo.com/new_mail > > -- > http://mm.ilug-bom.org.in/mailman/listinfo/linuxers -- http://mm.ilug-bom.org.in/mailman/listinfo/linuxers
