Hi,
Your Squid machine is going to be a Gateway. right?
Then do this for redirecting http packets from your network to your Squid,
ipchains -A input -j REDIRECT 8080 -p tcp -s 192.168.1.0/24 -d 0.0.0.0/0 80
Do this for maquerading packets other than http,
ipchains -N good-bad
ipchains -A forward -s 192.168.1.0/24 -i ppp0 -j good-bad
ipchains -A good-bad -p tcp --dport 21 -j MASQ
ipchains -A good-bad -p tcp --dport smtp -j MASQ
ipchains -A good-bad -p tcp --dport 110 -j MASQ
ipchains -A good-bad -p tcp --dport ssh -j MASQ
ipchains -A good-bad -p tcp --dport telnet -j MASQ
Regards,
squid@visolve.com
www.visolve.com
This is my ipchains file which executes at the startup Do I need to add anything in to it to enable it:
/sbin/ipchains -A input -p tcp -s 192.168.1.0/24 -d 0/0 80 -j REDIRECT 8080
/sbin/ifconfig eth0:0 192.168.1.1
/sbin/ipchains -A forward -s 192.168.1.0/24 -j MASQ
/sbin/ipchains -A input -p tcp -s 192.168.1.0/24 ftp -j ACCEPT
/sbin/ipchains -A input -p tcp -s 191.168.1.0/24 ftp-data -j ACCEPT
/sbin/ipchains -A output -p tcp -s 192.168.1.0/24 ftp-data -j ACCEPT
/sbin/insmod ip_masq_ftp
Charanbeer.
----- Original Message -----
From: Löger, Stefan
To: 'Charanbeer' ; Squid
Sent: Friday, May 25, 2001 1:07 PM
Subject: AW: [squid-users] Telnet Sessions Disconnect
Squid is NOT a Telnet Proxy, only Http, Ftp und SSL tunneling!!
-----Ursprüngliche Nachricht-----
Von: Charanbeer [mailto:charanbeer.s@net4india.net]
Gesendet: Freitag, 25. Mai 2001 09:35
An: Squid
Betreff: [squid-users] Telnet Sessions Disconnect
Hi All
I am running Squid 2.3 on Red Hat 6.1 with the deafult squid.conf serving 40odd win95/98 clients.My squid machine is PIII 550 MHz
with 10gb HDD and 128MB RAM (256MB of swap space) These clients use telnet a lot and their telnet sessions tend to disconnect after every few minutes whereas if they go directly(i.e. without using proxy) they dont face any such problem.
Is there anything in squid.conf which defines the idle time after which the client's telnet session is disconnected. Any suggestions on this would be a great help.
Thanks in advance
Charanbeer.
Received on Tue May 29 2001 - 21:39:48 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:20 MST