Joffrey FLEURICE wrote:
> In policy
> 
> $FW   Net     ACCEPT

Then what is the point of all of the $FW->Net ACCEPT rules????

If you

a) Have the correct REDIRECT rule (which you do); and
b) Are accepting $FW->Net HTTP traffic (which you are -- at least with your
policy); and
c) DNS works from your firewall (I assume it does since you are wide open from
$FW->Net); then

The problem is in your Squid configuration (this is true in %90 of the reports
on this list where Squid doesn't work; the other %10 fail to allow either HTTP
or DNS from the firewall).

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to