-----BEGIN PGP SIGNED MESSAGE-----
Temp wrote:
>After I have run squid in the Linux server,
Is this server a gateway through which the clients reach the internet,
or is is a parallel server on the same network?
>/sbin/ipchains -A input -p TCP -d 0/0 --dport 80 -j REDIRECT 3128
I use this syntax (which is not to say that yours is wrong, just that
this one does work):
/sbin/ipchains -A input -j REDIRECT 3128 -p tcp -s 0.0.0.0/0 -d
0.0.0.0/0 80
But that isn't going to do you any good unless squid is running on a
functioning gateway, and you issue that redirect on the gateway.
>I have also tried setting the default gateway of the Windows client pointing
>to the Linux server, still the same.
I surmise from this statement that your squid server is not your
gateway. That means your clients are oblivious to its presence until
you tell them about it.
What you're trying to do is insert a proxy between your workstations
and the internet. That means it has to be someplace where packets
must pass through it, such as on your gateway. If that's not the
case, you have two options, one of which is to tell your browsers
about it, as you've done. The other option is to redirect traffic on
80 from the gateway to the squid server, which (as far as I know)
ipchains can't do. iptables can do this, but requires a 2.4 kernel.
If you're stuck with an older kernel, someone else will have to chime
in; I think perhaps ipfwadmin is what you'd want.
Personally, I run a parallel squid server, because my gateway is also
a firewall, and services don't belong there ... so I set it up just as
you apparently have, and point my browsers at it.
Does that help?
- -d
- --
David Talkington
http://www.spotnet.org
PGP key: http://www.prairienet.org/~dtalk/dt000823.asc
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.75-6
iQEVAwUBOsl7tb1ZYOtSwT+tAQFxZQgAwI9rO3nI31hv9cxyCf0qR4us7Jmi2+1P
j5b/53N8zPCY4XK0Dp3OLTHCRU6kHihOSZBAQ2DPK4xx3nmk4w5J8XD68ZrHSDvh
+arGPr1ykSANogBmHAcSRF4Y6+VVr664RnI+WtMirAmukBkXxKBkxi4VUlv4X03j
bktClUZJLC/fAf5B8wZhiJHEGUpFuuubRI3TkWi1xx4KhUd1lwuJrJR6zNzJSV3z
wvsVdSkif2Ga9dJWM/JfXU+Q3qd/Pdg3nuttmWNQnKy0t5NtUsG3tWHWSCuFY/EZ
GM37aMJ7OnpoPqZD+ghIk0An03kQMmb8umAgtt5/b7ARZ9EBJvDpxw==
=DqAZ
-----END PGP SIGNATURE-----
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
