🚀 go-pugleaf

Hi,

I manage to get it to work now. by using ipchains rules below (modify to suit
my LAN) and also reading this site
http://rpmfind.net/linux/mdw/HOWTO/mini/TransparentProxy-4.html . Elem103
mention most of it but the site mention something that I don't know before.
like
1. squid -z # run first time
2. http_access allow all  #in httpd.conf

Regarding the ipchains rules belows I simply just run it on top of the rules
generated by the firewall (firestarter).

Right now anyone can browse from my LAN (192.168.0.0/24)either using the proxy
or without the proxy that I set up.
I want to restrict everyone in my LAN to user the proxy server (192.168.0.3).
Any help is much appreciated.

Anway many thanks to Elem103 for his kind contributions.


Regads,

Theng


Elem103 wrote:

> "
>
> Prerouting ... sounds like iptables to me.  Anyway... below is a setup for
> ipchains.
>
> eg. you have 2 network card on the computer and you already have packet
> forwarding enabled and set up via ipchains.
>
> Internet<---->(203.x.x.x (dynamic))Server With Squid (192.168.1.1)<---->Your
> Local LAN (192.168.1.x)
>
> # A few things needed for transparent proxying
> ipchains -A input -p tcp -d localhost 80 -j REJECT
> ipchains -A input -d 192.168.1.1/32 80 -p tcp -j REJECT
> ipchains -A input -d 192.168.1.1/32 80 -p udp -j REJECT
>
> # Redirect things to port 80 to port 3128
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 80 -p tcp -j REDIRECT 3128
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 80 -p udp -j REDIRECT 3128
>
> # Optionally, you can also redirect SSL and FTP
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 443 -p tcp -j REDIRECT 3128
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 443 -p udp -j REDIRECT 3128
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 21 -p tcp -j REDIRECT 3128
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 21 -p udp -j REDIRECT 3128
>
> Your squid needs to be configured as a HTTPD accelerator as well.
>
> httpd_accel_host virtual
> httpd_accel_port 80
> httpd_accel_with_proxy on
> httpd_accel_uses_host_header on
>
> =-
> Elem103