Help Redirect

[Antony Stone]

On Wednesday 06 November 2002 4:34 pm, Linux User wrote:

> Hi friends,
>
> My consultation is the following one:
>
> What rules (IPTABLES) in firewall I can apply so that all the requirement
> of the internal network to port 80 is redirected to an external Squid Proxy
> server (3128) .
>
> Firewall:
> Eth0 (External): 192.168.100.1
> Eth1 (Internal):   172.16.100.1
>
> Squid Proxy Server:
> Eth0 : 192.168.100.100

iptables -A PREROUTING -t nat -i eth1 -p tcp --dport 80 -j DNAT --to 
192.168.100.100:3128
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth1 -p tcp --dport 3128 -d 192.168.100.100 -j ACCEPT

Antony.

-- 

Anything that improbable is effectively impossible.

 - Murray Gell-Mann, Nobel Prizewinner in Physics