-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sebastian wrote:
>
> 
> And this is my shorewall rules:
> #HTTP
> HTTP/ACCEPT     net             $FW

I assume you want:

HTTP/ACCEPT     $FW             new

That will allow your proxy to access the internet.

> HTTP/ACCEPT     loc             $FW
> REDIRECT        loc:!10.0.0.0/9 8081    tcp     80      -

I rather doubt that rule is what you want. It will redirect port 80 to
local port 8081 EXCEPT IF THEY ARE SENT BY 10.0.0.0/9.

> 
> This are good rules?

When you show us a few rules out of context, we really cannot tell if
they are 'good' or not.

- -Tom
- --
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkqLPkEACgkQO/MAbZfjDLJAUQCfYqlIp/yeh2kYvhR4f+vCWZ6V
taYAn21JJuNySttHiRc5LDJK+WmNz6vg
=yZE4
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to