* redirect to proxy servere
@ 2007-03-01 12:19 dhottinger
2007-03-01 13:00 ` Jan Engelhardt
0 siblings, 1 reply; 5+ messages in thread
From: dhottinger @ 2007-03-01 12:19 UTC (permalink / raw)
To: netfilter
I currently redirect all port 80 traffic to my squid proxy server with
following:
$IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
$IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
$IPC -A TOSERVERS -p tcp --dport 9011:9015 -d 204.111.40.10 -i $L3 -j LACCEPT
$IPC -A TOSERVERS -p tcp --dport 10000 -d 204.111.40.10 -i $L3 -j LACCEPT
Works great, except all of a sudden my apple computers wont do
software updates. So, I would like to not redirect traffic that is
destined for apple.com or swscan.apple.com's website. Im not quite
sure of the syntax for my rule, or if this is even possible. Any ideas?
thanks,
ddh
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: redirect to proxy servere
2007-03-01 12:19 redirect to proxy servere dhottinger
@ 2007-03-01 13:00 ` Jan Engelhardt
2007-03-01 13:50 ` dhottinger
0 siblings, 1 reply; 5+ messages in thread
From: Jan Engelhardt @ 2007-03-01 13:00 UTC (permalink / raw)
To: dhottinger; +Cc: netfilter
On Mar 1 2007 07:19, dhottinger@harrisonburg.k12.va.us wrote:
>
> I currently redirect all port 80 traffic to my squid proxy server with
> following:
>
> $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
> $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
> $IPC -A TOSERVERS -p tcp --dport 9011:9015 -d 204.111.40.10 -i $L3 -j LACCEPT
> $IPC -A TOSERVERS -p tcp --dport 10000 -d 204.111.40.10 -i $L3 -j LACCEPT
>
> Works great, except all of a sudden my apple computers wont do software
> updates. So, I would like to not redirect traffic that is destined for
> apple.com or swscan.apple.com's website. Im not quite sure of the syntax for
> my rule, or if this is even possible. Any ideas?
Perhaps the problem is not in the "TOSERVERS" chain but the "LACCEPT" one.
Or even somewhere else in the iptables ruleset.
Jan
--
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: redirect to proxy servere
2007-03-01 13:00 ` Jan Engelhardt
@ 2007-03-01 13:50 ` dhottinger
2007-03-01 14:09 ` dhottinger
0 siblings, 1 reply; 5+ messages in thread
From: dhottinger @ 2007-03-01 13:50 UTC (permalink / raw)
To: Jan Engelhardt; +Cc: netfilter
Same ruleset Ive been using for 3 years with no issues. I just would
like to have any traffic going to apples update site go straight there
without being redirected to my proxy.
thanks,
ddh
Quoting Jan Engelhardt <jengelh@linux01.gwdg.de>:
>
> On Mar 1 2007 07:19, dhottinger@harrisonburg.k12.va.us wrote:
>>
>> I currently redirect all port 80 traffic to my squid proxy server with
>> following:
>>
>> $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
>> $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
>> $IPC -A TOSERVERS -p tcp --dport 9011:9015 -d 204.111.40.10 -i $L3
>> -j LACCEPT
>> $IPC -A TOSERVERS -p tcp --dport 10000 -d 204.111.40.10 -i $L3 -j LACCEPT
>>
>> Works great, except all of a sudden my apple computers wont do software
>> updates. So, I would like to not redirect traffic that is destined for
>> apple.com or swscan.apple.com's website. Im not quite sure of the
>> syntax for
>> my rule, or if this is even possible. Any ideas?
>
> Perhaps the problem is not in the "TOSERVERS" chain but the "LACCEPT" one.
> Or even somewhere else in the iptables ruleset.
>
>
>
> Jan
> --
>
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: redirect to proxy servere
2007-03-01 13:50 ` dhottinger
@ 2007-03-01 14:09 ` dhottinger
2007-03-01 16:11 ` Jan Engelhardt
0 siblings, 1 reply; 5+ messages in thread
From: dhottinger @ 2007-03-01 14:09 UTC (permalink / raw)
To: netfilter
Quoting dhottinger@harrisonburg.k12.va.us:
> Same ruleset Ive been using for 3 years with no issues. I just would
> like to have any traffic going to apples update site go straight there
> without being redirected to my proxy.
>
> thanks,
> ddh
>
>
> Quoting Jan Engelhardt <jengelh@linux01.gwdg.de>:
>
>>
>> On Mar 1 2007 07:19, dhottinger@harrisonburg.k12.va.us wrote:
>>>
>>> I currently redirect all port 80 traffic to my squid proxy server with
>>> following:
>>>
>>> $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
>>> $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j LACCEPT
>>> $IPC -A TOSERVERS -p tcp --dport 9011:9015 -d 204.111.40.10 -i $L3
>>> -j LACCEPT
>>> $IPC -A TOSERVERS -p tcp --dport 10000 -d 204.111.40.10 -i $L3 -j LACCEPT
>>>
>>> Works great, except all of a sudden my apple computers wont do software
>>> updates. So, I would like to not redirect traffic that is destined for
>>> apple.com or swscan.apple.com's website. Im not quite sure of the
>>> syntax for
>>> my rule, or if this is even possible. Any ideas?
>>
>> Perhaps the problem is not in the "TOSERVERS" chain but the "LACCEPT" one.
>> Or even somewhere else in the iptables ruleset.
>>
>>
>>
>> Jan
>> --
>>
>
>
>
> --
> Dwayne Hottinger
> Network Administrator
> Harrisonburg City Public Schools
$IPC -N LACCEPT
$IPC -A LACCEPT -j ACCEPT
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: redirect to proxy servere
2007-03-01 14:09 ` dhottinger
@ 2007-03-01 16:11 ` Jan Engelhardt
0 siblings, 0 replies; 5+ messages in thread
From: Jan Engelhardt @ 2007-03-01 16:11 UTC (permalink / raw)
To: dhottinger; +Cc: netfilter
On Mar 1 2007 09:09, dhottinger@harrisonburg.k12.va.us wrote:
>> > >
>> > > $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j
>> > > LACCEPT
>> > > $IPC -A TOSERVERS -p tcp --dport 8080 -d 204.111.40.10 -i $L3 -j
>> > > LACCEPT
>> > > $IPC -A TOSERVERS -p tcp --dport 9011:9015 -d 204.111.40.10 -i $L3
>> > > -j LACCEPT
>> > > $IPC -A TOSERVERS -p tcp --dport 10000 -d 204.111.40.10 -i $L3 -j
>> > > LACCEPT
This is just filtering. If you do not want things to be NAT'ed,
do it in the nat table.
Jan
--
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2007-03-01 16:11 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2007-03-01 12:19 redirect to proxy servere dhottinger
2007-03-01 13:00 ` Jan Engelhardt
2007-03-01 13:50 ` dhottinger
2007-03-01 14:09 ` dhottinger
2007-03-01 16:11 ` Jan Engelhardt
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.