search for: cooperatif

...firewall setup. So here's what I want to do, in plain words: 1. Redirect all HTTP traffic (port 80) to port 3128. So far so good. 2. Redirect all HTTPS traffic (port 443) to port 3129. Equally OK. AND... 3. DO NOT REDIRECT traffic that goes to certain domains, like: github.com credit-cooperatif.coop cloud.microlinux.fr squid-cache.org etc. Ideally, these domains should be read from a simple text file. Any idea how I could do that? I don't even know if this is theoretically possible. Cheers, Niki -- Microlinux - Solutions informatiques durables 7, place de l'?glise - 30...

...schrieb Nicolas Kovacs <info at microlinux.fr>: > > I've experimented some more, and I have a partial success. Here, I'm > redirecting all HTTPS traffic *except* the one that goes to my bank: > > iptables -A PREROUTING -t nat -i $IFACE_LAN -p tcp ! -d > www.credit-cooperatif.coop --dport 443 -j REDIRECT --to-port 3129 > > This works because my bank is hosted on a single IP. As soon as I > replace that with a domain that's hosted on multiple IP's, I get this: > > iptables -A PREROUTING -t nat -i $IFACE_LAN -p tcp ! -d www.google.com > --dport...

...lain words: > > 1. Redirect all HTTP traffic (port 80) to port 3128. So far so good. > > 2. Redirect all HTTPS traffic (port 443) to port 3129. Equally OK. > > AND... > > 3. DO NOT REDIRECT traffic that goes to certain domains, like: > > github.com > credit-cooperatif.coop > cloud.microlinux.fr > squid-cache.org > etc. I've experimented some more, and I have a partial success. Here, I'm redirecting all HTTPS traffic *except* the one that goes to my bank: iptables -A PREROUTING -t nat -i $IFACE_LAN -p tcp ! -d www.credit-cooperatif.coop -...

...o-port 3129 $IPT -A INPUT -p tcp -i $IFACE_LAN --dport 3130 -j ACCEPT $IPT -A INPUT -p udp -i $IFACE_LAN --dport 3130 -j ACCEPT And my no-proxy.txt file looks like this: # Ne pas utiliser le proxy pour les domaines suivants # # Cr?dit Agricole www.credit-agricole.fr # Cr?dit Coop?ratif www.credit-cooperatif.coop # Github github.com # Microlinux microlinux.fr microlinux.eu # Squid squid-cache.org # Thunderbird start.thunderbird.net Note that I can put either domain names or IP addresses in this file. And it's only supposed to keep a list of a handful of URLs that don't play well with a transp...

...port 3130 -j ACCEPT > $IPT -A INPUT -p udp -i $IFACE_LAN --dport 3130 -j ACCEPT > > And my no-proxy.txt file looks like this: > > # Ne pas utiliser le proxy pour les domaines suivants > # > # Cr?dit Agricole > www.credit-agricole.fr > # Cr?dit Coop?ratif > www.credit-cooperatif.coop > # Github > github.com > # Microlinux > microlinux.fr > microlinux.eu > # Squid > squid-cache.org > # Thunderbird > start.thunderbird.net > > Note that I can put either domain names or IP addresses in this file. > > And it's only supposed to keep a...