search for: shorewall_squid_usag

I''m trying to get TPROXY / Squid running and I have a few questions... I found this page: http://www.shorewall.net/Shorewall_Squid_Usage.html#TPROXY However, it doesn''t explain what I''m seeing in the configuration. For the zone file, do I keep my loc and net configurations and just add the following to the file? - lo - - or do I remove the loc and net zones and replace it with the above line? When I try...

...;royke4k@cbn.net.id> To: shorewall-users@lists.shorewall.net How do I configure port forwarding/IP forwarding on Shorewall to squid on the remote box. My problem is similar as described on : http://users.gurulink.com/drk/transproxy/TransparentProxy.html I,ve read all http://www.shorewall.net/Shorewall_Squid_Usage.html and a little http://www.shorewall.net/FAQ.htm. Please forgive me if I miss a(ny) clue here .. I,m totally newbie. Thanks. Regards - -- - - What''s your Windows version? - - 6.8.1! - - ??????? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG wit...

I''ll take this one next. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

...my network can access to internet normal, but can''t redirect to squid server from firewall. sometimes my network can connect to squid and sometimes bypass this squid server. i dont know what going on. now.. my network bypass redirect to squid server. my config file follow document on Shorewall_Squid_Usage.html (Squid (transparent) Running in the DMZ) any idea? this config always conflix with proxyarp? ============================================= Netkuis Instan untuk wilayah Bandung (kode area 022) - SD,SMP,SMA Berhadiah total puluhan juta rupiah... periode I dimulai 1 April 2004 ==============...

I remember to see something about that in shorewall.net some time ago, but I could not find it today ... The case : Debian Etch, Shorewall 3.2.6, squid3 and Apache 2 . The first 3 where already running fine for some time ... Now I need to setup an Apache server to allow some web mannagement, things like PHPsysinfo, phppgadmin, just for internal net, no web access . but port 80 is redirected to

Hello all, I''m reading the nice documentation about shorewall with multi isp. And I wonder about squid (non transparent) and shorewall Can I use on same machine, squid with ldap ident, dansguardian, and shorewall with multi-isp (four or five) ? Perhaps there is a problem because squid mask source IP, shorewall can maintain and load balance sessions for the same source IP ? Thanks Fred

I''m asking this question for the sysadmin where I work. Will Shorewall do this? Joe, I am looking for a linux router that will look at the source IP (not the destination) and then forward the packet out a specific interface to another host. For example if a packet comes in to the linux router from NET-A it will forward the packet out INTERFACE-A to HOST-A. If a packet comes in to the

Hi, first of all, let me thank you for your great Shoreline Firewall. I use it with great success at home (protecting my WiFi connection). And now if I could have a question about traffic shaping. I did read everything I could find but I still have two problems: first, the MARK from tcrules is not working in HTB based simple tc filter line ("handle $MARK fw classid 1:20"). If I switch

Having moved from a "cascading LANs" configuration to two independent LANs on eth0 and eth1, I still get some "state INVALID" for which I am not sure what the cause is. Can somebody help me understand its probable origin? Thanks, Costantino [see attachment]

Hi everybody, I have my firewall with shorewall runing and I dont have a proxy. I would like to know which tool can I use to log my web traffic from my users. I have ntop working but I dont think this tool helps me on this. Any suggestion? Thanks ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial

Hallo, I got a problem (I think it''s not a Problem, I am just to stupid to manage it) Iwant my Server (eth1: addr:10.0.123.1, Local Zone), eth0 is connectet to the Student-Network (addr:172.16.129.106 Mask:255.255.248.0 gateway: 172.16.128.1, Net Zone), to forward all packages from port 80 on local Zone to www-cache.uni-halle.de:3128 (172.16.128.1:3128) because I have to use this

Greetings all, I''m a bit of a linux rookie, but a friend and I have built a firewall running Shorewall 1.4.6c over a minimal install of Redhat 9. Out network setup looks something like this: Cable Modem : eth0 :12.xxx.xxx.3 (Zone is named INSIGHT) Campus Lan : eth1 : 10.176.9.21 (Zone is named MULAN) DMZ : eth2 : 192.168.1.0 255.255.255.0 (Zone is named DMZ) Currently, I

If you are willing to patch your iptables and kernel to support the ROUTE target, the code in CVS project Shorewall2/ now supports very flexible routing. As an example, I run Squid in my DMZ for transparent proxy. Rather than the complex routing setup described in http://shorewall.net/Shorewall_Squid_Usage.html, I now use this single entry in /etc/shorewall/routes to route all HTTP requests from the internal network to 206.124.146.177 in the DMZ: #SOURCE DEST PROTO PORT(S) SOURCE INTERFACE GATEWAY # PORT(S) $INT_IF 0.0.0.0/0 tcp...

...ntp to a Network Appliance NetCache transparent caching proxy. Here''s what the network layout looks like: ~ Net ~ | ~ Linux fw/router ~ | - ------Switch-------- | | Clients Cache I have read the shorewall with squid doc at http://www.shorewall.net/Shorewall_Squid_Usage.html which has been helpful, but it leaves me just short of a solution due to the fact that the documented solution requires that an iptables redirect rule be configured on the web cache server. My situation matches the "Squid (transparent) Running in the local network" section with the...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How do I configure port forwarding/IP forwarding on Shorewall to squid on the remote box. My problem is similar as described on : http://users.gurulink.com/drk/transproxy/TransparentProxy.html I,ve read all http://www.shorewall.net/Shorewall_Squid_Usage.html and a little http://www.shorewall.net/FAQ.htm. Please forgive me if I miss a(ny) clue here .. I,m totally newbie. Thanks. Regards -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFCOAeDeHz+3aIJ/qQRAvcnAKCK...

I don''t know what is happening, but every 36 hours or so I''ll go to ssh into my server and find that I can''t connect on any of the outside services. I then can connect into the box using a serial connection and find that shorewall reports that it is not running and the iptables are in some kind of default state which looks nothing like what I set it up with shorewall

Hi everybody. We are running Shorewall and Squid on Suse on the same box. Each is working fine independently, but we can''t get them to cooperate. The access log in squid shows no requests when Shorewall is on. Here are all the changes we made in the configuration files. Everything else is the same. We have read through the mailing list and the guide, but still haven''t figured it

Hi all, (not sure that this is the right places where send this. sorry) I think that http://www.shorewall.net/Shorewall_Squid_Usage.html must be updated. The current SQUID version (2.6) don''t support anymore the ''httpd_accel'' directives. So anyone that would follow this guide for configure a transparent proxy will receive an error 400. Please modify the guide as follow (as in SQUID documentation):...

While I''m in temporary retirement, I''ve decided spend a little time experimenting with new things and making some updates to the web site. The biggest result of this effort to date has been: http://shorewall.sf.net/Shorewall_Squid_Usage.html This outlines how to use Squid as a transparent proxy running on the firewall, in the DMZ or in the local network. In the latter two cases, policy routing is used rather than Shorewall rules so that no Squid functionality is lost. I have personally tested all three cases in one form or a...