>
> On Mon, Nov 30, 2009 at 10:50:09PM -0800, Michael Robinson wrote:
>   
>> The redirect method:
>> iptables -t nat -A PREROUTING -s $local -d ! $local --dport 80 -j
>> REDIRECT --to-port 8080
>> doesn't seem to be the accepted way to proxy anymore and it doesn't
>> seem to work either.
If you have a proxy service on the same machine then your rule looks 
mostly correct w. the the exception of the missing "-i 
incominginterface", "-p tcp" options.

iptables -t nat -A PREROUTING -i incomminginterface -s sourceip -p tcp 
--dport 80 -j REDIRECT --to-port proxyport

If you have a proxy in different machine then you're not using the 
correct rule:

iptables -t nat -A PREROUTING -i incominginterface -p tcp --dport 80 -j 
DNAT --to proxyip:proxyport





_______________________________________________
PLUG mailing list
[email protected]
http://lists.pdxlinux.org/mailman/listinfo/plug

Reply via email to