Allowing hosts to bypass transparent proxy (squid+netfilter)
to port 80 for a specific netmask
bernardo.vieira at terra.com.br
Thu Dec 14 23:06:08 CET 2006
-----BEGIN PGP SIGNED MESSAGE-----
Thanks for your reply. That rule did allow me to bypass the proxy, the
java app I'm supposed to run still doens't work, but now I'm conviced
It's not my gateway messing it up.
That diagram really kicks ass! :)
Andrew Beverley wrote:
> Sorry for the top posting but it's a big message...
> How about trying
> -A PREROUTING -i ! eth0 -p tcp -m tcp --dport 80 -d \
> 220.127.116.11/255.255.240.0 -j ACCEPT
> directly *before* the rule to direct hosts to squid.
> The other rule you noted is a FORWARD rule which is processed *after*
> the PREROUTING rule you use for squid, so by the time the packets get to
> that rule they've already been grabbed by squid.
> The following link is an excellent diagram to appreciate the routing
> order - it would be nice to see this on the netfilter homepage!
> Andy Beverley
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the netfilter