I was searching the internet and found this script which can be used to get
a complete url log using squid.

http://www.benking.me.uk/2007/10/24/vyatta-forwarding-traffic-to-squid/

#!/bin/sh -e
#
# rc.local
#
# Modified to forward to squid cache
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0″ on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#

IPTABLES="/sbin/iptables"
IP="/sbin/ip"
SQUID="10.1.1.1″      # Internal address of our squid box

# Webcache jump to cache
echo Setting up jump to webcache

# clear any existing entries
$IPTABLES -t mangle -F
$IPTABLES -t mangle -X

# Don't mark webcache traffic
$IPTABLES -t mangle -A PREROUTING -j ACCEPT -p tcp �Cdport 80 -s $SQUID
# Internal subnets to exclude
$IPTABLES -t mangle -A PREROUTING -j ACCEPT -p tcp �Cdport 80 -d 10.0.0.0/8
#Don't cache internal

# External sites to exclude
$IPTABLES -t mangle -A PREROUTING -j ACCEPT -p tcp �Cdport 80 -d 1.2.3.4 #IP
address of site you want to exclude from going to the cache

# Now mark our traffic, we have a number of subnets on virtual interfaces we
want to grab, if you aren't using vifs simply use eth1 or whatever you are
using
$IPTABLES -t mangle -A PREROUTING -j MARK �Cset-mark 3 -i eth3.102 -p tcp
�Cdport 80
$IPTABLES -t mangle -A PREROUTING -j MARK �Cset-mark 3 -i eth3.103 -p tcp
�Cdport 80

# Send the marked traffic to table 2 (you can actaully use whatever table
you want, i used 2 because we are using eth2 for the subnet squid is on.
$IP rule add fwmark 3 table 2

# set the default route for table 2, change eth2 for the interface you are
on
$IP route add default via $SQUID dev eth2 table 2

# Make sure we exit
exit 0


I Just wanted someone to explain me this a little more Ben did explain it on
his site but still i would like someone to explain this please.
_______________________________________________
Vyatta-users mailing list
Vyatta-users@mailman.vyatta.com
http://mailman.vyatta.com/mailman/listinfo/vyatta-users

Reply via email to