/sbin/iptables -t nat -A PREROUTING -p TCP -s sua_rede --dport www -j REDIRECT --to-port 8080 /sbin/iptables -t nat -A PREROUTING -p TCP -s sua_rede --dport 8080 -j REDIRECT --to-port 8080 /sbin/iptables -t nat -A PREROUTING -p TCP -s sua_rede --dport 80 -j REDIRECT --to-port 8080
Tente essa ai. Citando Marceleza - Gmail <[EMAIL PROTECTED]>: > Ai vai > > INTERNET=0/0 > LOCALHOST=127.0.0.1 > LOCALNET=10.0.0.0/22 > > > IPTABLES=/sbin/iptables > PUBLIC_IF=eth0 > LOCAL_IF=eth1 > > > $IPTABLES -F > $IPTABLES -t nat -F > $IPTABLES -t filter -F > $IPTABLES -t mangle -F > # ****************** # > # Ativa o roteamento > # ****************** # > echo 1 > /proc/sys/net/ipv4/ip_forward > > # ********************************* # > # Redirecionamento do PROXY # > # ********************************* # > # Redireciona HTTP para máina > $IPTABLES -t nat -A PREROUTING -i $LOCAL_IF -p tcp --dport 80 -j > REDIRECT --to-port 8080 > $IPTABLES -t nat -A PREROUTING -i $LOCAL_IF -p udp --dport 80 -j > REDIRECT --to-port 8080 > > $IPTABLES -A FORWARD -s $INTERNET -d $INTERNET -j ACCEPT > > Bem, isso eh a parte que acho que interessa. Caso queria ver mais, por > favor solicite . > > Valeu mesmo > > [EMAIL PROTECTED] escreveu: > > Coloque suas regras de firewall ai cara para darmos uma olhada no que > > esta fazendo. > > > > Citando Marceleza - Gmail <[EMAIL PROTECTED]>: > > > > > Pessoal, > > > > > > Meu proxy transparente nao esta funcionando, preciso de ajuda por favor. > > > > > > Transcrevo abaixo o squid.conf. Obrigado. > > > > > > ################## INICIO DO ARQUIVO > > > visible_hostname xxx.xxx.xxx.xx > > > http_port 8080 > > > icp_port 0 > > > acl QUERY urlpath_regex cgi-bin \? > > > no_cache deny QUERY > > > no_cache allow QUERY > > > cache_mem 512 MB > > > maximum_object_size_in_memory 128 KB > > > maximum_object_size 1024 MB > > > minimum_object_size 0 KB > > > cache_swap_low 90 > > > cache_swap_high 95 > > > cache_dir ufs /var/spool/squid 2048 16 256 > > > cache_access_log /var/log/squid/access.log > > > #cache_access_log /dev/null > > > dns_nameservers 200.255.125.211 > > > > > > > > > #proxy transparente > > > httpd_accel_host virtual > > > httpd_accel_port 80 > > > httpd_accel_with_proxy on > > > httpd_accel_uses_host_header on > > > > > > acl localnet src 10.0.0.0/255.255.252.0 > > > acl localhost src 127.0.0.1/255.255.255.255 > > > > > > > > > acl Safe_ports port 80 443 210 119 70 20 21 1863 1025-65535 > > > acl CONNECT method CONNECT > > > acl all src 0.0.0.0/0.0.0.0 > > > acl ips_acessofull url_regex -i "/etc/squid/liberados/ips_acessofull.txt > > > acl proxygw url_regex -i "/etc/squid/bloqueados/proxy/domains.txt" > > > acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt" > > > acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt" > > > acl malware_block_list url_regex -i > > "/etc/squid/mbl/malware_block_list.txt" > > > > > > > > > > > > http_access allow localnet > > > http_access allow localhost > > > http_access allow ips_acessofull > > > http_access deny malware_block_list > > > http_access deny proxygw > > > http_access deny blockedsites !unblockedsites > > > http_access deny !Safe_ports > > > http_access deny CONNECT > > > > > > > > > > > > > > > ################## FIM DO ARQUIVO > > > > > > Marceleza - Gmail escreveu: > > > > E ae Drops. > > > > > > > > Rapaz, agora nao bloqueio orkut, que esta na minha lista de malwares. > > > > > > > > Vou reenviar pra vc dar uma olhada por favor. > > > > > > > > Obrigado. > > > > > > > > > > > > > > > > acl localnet src 10.0.0.0/255.255.252.0 > > > > acl localhost src 127.0.0.1/255.255.255.255 > > > > > > > > > > > > acl Safe_ports port 80 443 210 119 70 20 21 1863 1025-65535 > > > > acl CONNECT method CONNECT > > > > acl all src 0.0.0.0/0.0.0.0 > > > > acl ips_acessofull url_regex -i > > "/etc/squid/liberados/ips_acessofull.txt > > > > acl proxygw url_regex -i "/etc/squid/bloqueados/proxy/domains.txt" > > > > acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt" > > > > acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt" > > > > acl malware_block_list url_regex -i > > > > "/etc/squid/mbl/malware_block_list.txt" > > > > > > > > > > > > http_access allow localnet > > > > http_access allow localhost > > > > http_access allow ips_acessofull > > > > http_access deny proxygw > > > > http_access deny malware_block_list > > > > http_access deny blockedsites !unblockedsites > > > > http_access deny !Safe_ports > > > > http_access deny CONNECT > > > > > > > > > > > > DropsDef escreveu: > > > >> Marceleza - Gmail wrote: > > > >> > Pessoal, > > > >> > > > > >> > A regra abaixo intitulada IPS_ACESSOFULL nao esta funcionando. > > Alguem > > > >> > saberia identificar o motivo? > > > >> > > > > >> > acl proxygw url_regex -i "/etc/squid/bloqueados/proxy/domains.txt" > > > >> > acl ips_acessofull url_regex -i > > > >> "/etc/squid/liberados/ips_acessofull.txt > > > >> > acl blockedsites url_regex -i "/etc/squid/bloqueados/block.txt" > > > >> > acl unblockedsites url_regex -i "/etc/squid/bloqueados/unblock.txt" > > > >> > acl malware_block_list url_regex -i > > > >> "/etc/squid/mbl/malware_block_list.txt" > > > >> > > > > >> > http_access deny proxygw > > > >> > http_access deny malware_block_list > > > >> > http_access deny blockedsites !unblockedsites > > > >> > http_access deny !Safe_ports > > > >> > http_access allow localnet > > > >> > http_access allow localhost > > > >> > http_access allow ips_acessofull > > > >> > http_access deny CONNECT > > > >> > > > > >> > > > > >> A ordem dos tratores alteram o viaduto. > > > >> > > > >> As permissões necessitam vir antes das negações na diretiva > > http_access. > > > >> Ex.: > > > >> > > > >> http_access allow localnet > > > >> http_access allow localhost > > > >> http_access allow ips_acessofull > > > >> http_access deny proxygw > > > >> http_access deny malware_block_list > > > >> http_access deny blockedsites !unblockedsites > > > >> http_access deny !Safe_ports > > > >> http_access deny CONNECT > > > >> > > > >> -- > > > >> > > > >> DropsDef > > > >> http://dropsdef.blogspot.com > > > >> msn: [EMAIL PROTECTED] > > > >> skype: dropsdef > > > >> > > > >> > > > > > > > > > > > > > > > > > > > > > > > > > > > > Enviar mensagem: [email protected] Assinar: [EMAIL PROTECTED] Cancelar assinatura: [EMAIL PROTECTED] Proprietário da lista: [EMAIL PROTECTED] Links do Yahoo! Grupos <*> Para visitar o site do seu grupo na web, acesse: http://br.groups.yahoo.com/group/squid-br/ <*> Para sair deste grupo, envie um e-mail para: [EMAIL PROTECTED] <*> O uso que você faz do Yahoo! Grupos está sujeito aos: http://br.yahoo.com/info/utos.html
