RE: [Comm] iptables

RE: [Comm] iptables

[InboxISi]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 962 bytes --]

>Ñäåëàí ìàñêàðàäèíã. Ñòîèò ñêâèä. ×òî íàäî ñêàçàòü, ÷òî áû ðåäèðåêòèòü
>âñå îáðàùåíèÿ ñ îïðåäåëåííîãî IP íà 80 ïîðò ïðîêñè íà, íàïðèìåð, 800?
>$IPTABLES -t nat -A PREROUTING -i eth1 -s 192.168.1.XX -p tcp --dport 80 -j
DNAT --to-destination 192.168.1.66:800
>
>Íå ïîìîãàåò. ×òî íå òàê?

Ìîæíî àäàïòèðîâàòü ïðàâèëà ïî àíàëîãèè ñ ýòèìè:

iptables -t nat -A PREROUTING -i eth0 -s ! squid-box -p tcp --dport 80 -j
DNAT --to squid-box:3128
Èëè
iptables -t nat -A PREROUTING -i eth0 -s 192.168.1.XX -p tcp --dport 80 -j
DNAT --to squid-box:3128

iptables -t nat -A POSTROUTING -o eth0 -s local-network -d squid-box -j SNAT
--to iptables-box
iptables -A FORWARD -s local-network -d squid-box -i eth0 -o eth1 -p tcp
--dport 3128 -j ACCEPT

À òàêæå, âîçìîæíî åùå ïîòðåáóåòñÿ íàñòðîèòü ñêâèä íà "ïðîçðà÷íîå"
ïðîêñèðîâàíèå
Ïðîïèñàòü â squid.conf ñëåäóþùèå ïàðàìåòðû:

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on