First I configured shorewall for squid transparency. That works without issue. No changes were made to Firefox browser configuration.
Attempting to get shorewall + squid + dansguardian/e2guardian configured properly for content filtering per http://article.gmane.org/gmane.comp.security.shorewall/18637/match=dansguardian Following the hints given in the post I'm unable to connect to internet properly. Browser error message is: "The proxy server is refusing connections" when Firefox's proxy is set to IP Address: 192.168.2.254 Port 8080. Shorewall 4.6.4.3 /etc/shorewall/rules changed as follows: Edit From: # # Squid (intercept) running on the firewall. # #ACTION SOURCE DEST PROTO DEST PORT(S) SOURCE ORIGINAL # PORT(S) DEST ACCEPT $FW net tcp www REDIRECT loc 3128 tcp www To: # # E2guardian on Port 8080. Squid at IP 127.0.0.1 Port 3128. # #ACTION SOURCE DEST PROTO DEST PORT(S) SOURCE ORIGINAL # PORT(S) DEST ACCEPT $FW net tcp www REDIRECT loc 8080 tcp www Squid 3.4.8 /etc/squid3/squid.conf changed as follows: Edit From: http_port 3128 intercepting To: http_port 127.0.0.1:3128 E2guardian 3.4.0.3 /etc/e2guardian/e2guardian.conf changed as follows: Edit From: filterip = To: filterip = 192.168.2.254 Unchanged: filterports = 8080 proxyip = 127.0.0.1 proxyport = 3128 I suspect I'm overlooking something that will be obvious to others with much more shorewall experience. Attached is dump log of shorewall configured for dansguardian/e2guardian. Any guidance would be greatly appreciated. Thanks.
shorewall_dump-squid-e2guardian.txt.gz
Description: application/gzip
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
