Difference between revisions of "Iptables Squid Transparent"
From MS Computech
| Line 7: | Line 7: | ||
/sbin/iptables -t nat -A PREROUTING -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 0.0.0.0/0.0.0.0 --dport 80:81 -j REDIRECT --to-ports 8888 | /sbin/iptables -t nat -A PREROUTING -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 0.0.0.0/0.0.0.0 --dport 80:81 -j REDIRECT --to-ports 8888 | ||
/sbin/iptables -A INPUT -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 192.168.1.1/255.255.255.255 --dport 8888 -j ACCEPT | /sbin/iptables -A INPUT -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 192.168.1.1/255.255.255.255 --dport 8888 -j ACCEPT | ||
| + | </pre> | ||
| + | <pre> | ||
| + | if [ -f /var/run/squid.pid ]; then | ||
| + | iptables -t nat -D PREROUTING -i eth1 -p tcp -m multiport --destination-port 80,5977 -j REDIRECT --to-port 3128 | ||
| + | iptables -t nat -I PREROUTING -i eth1 -p tcp -m multiport --destination-port 80,5977 -j REDIRECT --to-port 3128 | ||
| + | fi | ||
</pre> | </pre> | ||
Latest revision as of 14:27, 18 September 2009
# Redirect service ftp from Local.Netcafe to any.Wan options redirectport="2121" /sbin/iptables -t nat -A PREROUTING -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 0.0.0.0/0.0.0.0 --dport 21 -j REDIRECT --to-ports 2121 /sbin/iptables -A INPUT -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 192.168.1.1/255.255.255.255 --dport 2121 -j ACCEPT # Redirect service http from Local.Netcafe to any.Wan options redirectport="8888" /sbin/iptables -t nat -A PREROUTING -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 0.0.0.0/0.0.0.0 --dport 80:81 -j REDIRECT --to-ports 8888 /sbin/iptables -A INPUT -i eth2 -p tcp -m tcp --syn -s 192.168.1.0/255.255.255.0 --sport 1024:65535 -d 192.168.1.1/255.255.255.255 --dport 8888 -j ACCEPT
if [ -f /var/run/squid.pid ]; then
iptables -t nat -D PREROUTING -i eth1 -p tcp -m multiport --destination-port 80,5977 -j REDIRECT --to-port 3128
iptables -t nat -I PREROUTING -i eth1 -p tcp -m multiport --destination-port 80,5977 -j REDIRECT --to-port 3128
fi
