Rhon wrote:
On Tue, Apr 1, 2008 at 6:54 PM, Paul Gear <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:Based on what you've described, your firewall should already be allowing this traffic, since eth0 & eth1 are in the same zone (net). If i remember correctly there's no restriction on intra-zone traffic, no matter what the policies are. PaulIs it possible to allow only 192.168.1.100 <http://192.168.1.100> to have direct access to the internet and REDIRECT all traffic bound to Port 80 to my Squid Proxy server? What I wanted to do is make an exemption to a particular host IP.
Assuming that Squid listens on port 3128: REDIRECT loc:!192.168.1.100 3128 tcp 80 -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
