Iptables -t nat -A PREROUTING -i $LAN_IN -p tcp -dport 80 -j DNAT -to $SQUID_SERVER : $SQUID_PORT # DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy Iptables -append FORWARD -in -interface $LAN_IN -j ACCEPT Iptables -table nat -append POSTROUTING -out -interface $INTERNET -j MASQUERADE # set this system as a router for Rest of LAN Iptables -A INPUT -i $INTERNET - m state -state ESTABLISHED ,RELATED -j ACCEPT # Load IPTABLES modules for NAT and IP conntrack support Script first configure Linux system as router and forwards all http request to port 3128 (Download the fw.proxy shell script): Iptables -t nat -A PREROUTING -i eth0 -p tcp -dport 80 -j REDIRECT -to-port 3128 Next, I had added following rules to forward all http requests (coming to port 80) to the Squid server port 3128 : OR, try out sed (thanks to kotnik for small sed trick) Here is the complete listing of nf for your reference (grep will remove all comments and sed will remove all empty lines, thanks to David Klein for quick hint ): http_access allow lan: - same as above.http_access allow localhost: Squid access to LAN and localhost ACL only.acl lan src 192.168.1.1 192.168.2.0/24: Access control list, only allow LAN computers to use squid.httpd_accel_uses_host_header on: Header is turned on which is the hostname from the URL.httpd_accel_with_proxy on: Squid act as both a local httpd accelerator and as a proxy.httpd_accel_port 80: 80 is port you want to act as a proxy.httpd_accel_host virtual: Squid as an httpd accelerator.Modify or add following squid directives: Step #3: Run scripts and start squid serviceįirst, Squid server installed (use up2date squid) and configured by adding following directives to file:.b)ğorward all http requests to 3128 (DNAT).Step #1 : Squid configuration so that it will act as a transparent proxy.Iv) OS: Red Hat Enterprise Linux 4.0 (Following instruction should work with Debian and all other Linux distros)Įth0 connected to internet and eth1 connected to local lan i.e. I) System: HP dual Xeon CPU system with 8 GB RAM (good for squid). Main benefit of setting transparent proxy is you do not have to setup up individual browsers to work with proxies.
0 kommentar(er)
