OpenForum RSS: �� squid + ��

�� squid + �� (garcia)

Sat, 05 Jan 2019 18:05:41 GMT

��
[code]iptables -t nat -I PREROUTING -i eth0 -s 109.0.0.8 -p tcp --dport 80 -j DNAT --to 109.0.0.110:3128
iptables -t nat -I PREROUTING -i eth0 -s 109.0.0.8 -p tcp --dport 443 -j DNAT --to 109.0.0.110:3129
iptables -t nat -I POSTROUTING -o eth0 -s 109.0.0.8 -d 109.0.0.110 -j SNAT --to 109.0.0.1
[/code]

��
[code]*nat
:PREROUTING ACCEPT [314:20555]
:INPUT ACCEPT [313:20511]
:OUTPUT ACCEPT [844:60999]
:POSTROUTING ACCEPT [2:130]
-A PREROUTING -s 109.0.0.0/24 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3129
-A PREROUTING -s 109.0.0.0/24 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.10.0/24 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3129
-A PREROUTING -s 192.168.10.0/24 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -s 192.168.1.0/24 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 3129
-A PREROUTING -s 192.168.1.0/24 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
-A POSTRO

�� squid + �� (garcia)

Fri, 04 Jan 2019 20:23:53 GMT

>> ��
>> [code]http_port 3128 intercept[/code]
>> ��
>> [code]http_port 3128 accel vhost allow-direct[/code]
>> �� http ��
>> �� https, ��
>> �� , �� ?
> �� SSL?

�� , ��
http_port 3128 intercept
https_port 3129 intercept ssl-bump connection-auth=off cert=/etc/squid/squidCA.pem

� �� , �� http - 403, � �� https ��

�� squid + �� (stalker37)

Fri, 04 Jan 2019 20:02:39 GMT

> ��
> [code]http_port 3128 intercept[/code]
> ��
> [code]http_port 3128 accel vhost allow-direct[/code]
> �� http ��
> �� https, ��
> �� , �� ?

�� SSL?

�� squid + �� (garcia)

Fri, 04 Jan 2019 19:37:18 GMT

��
[code]http_port 3128 intercept[/code]
��
[code]http_port 3128 accel vhost allow-direct[/code]
�� http ��

�� https, �� , �� ?

�� squid + �� (garcia)

Fri, 04 Jan 2019 15:24:53 GMT

�� tcpdump �� , �.�. �� , �� 403, ��
acl localnet src 109.0.0.0/24
http_access allow localnet
��

�� squid + �� (garcia)

Fri, 04 Jan 2019 14:20:08 GMT

>> ��
>> [code]iptables -t nat -I PREROUTING -i eth0 ! -s 109.0.0.110 -p tcp
>> --dport 80 -j DNAT --to 109.0.0.110:3128[/code]
>> �� ?
> � ��-��
> iptables -t nat -A PREROUTING -i eth0 -s ! squid-box -p tcp
> --dport 80 -j DNAT --to squid-box:3128
> ...

��
[code]iptables -t nat -A PREROUTING -i eth0 -s ! 109.0.0.110 -p tcp --dport 80 -j DNAT --to 109.0.0.110:3128
Bad argument `109.0.0.110'
Try `iptables -h' or 'iptables --help' for more information.
[/code]

�� ! �� -s

�� squid + �� (��)

Fri, 04 Jan 2019 11:36:34 GMT

> ��
> [code]iptables -t nat -I PREROUTING -i eth0 ! -s 109.0.0.110 -p tcp
> --dport 80 -j DNAT --to 109.0.0.110:3128[/code]
> �� ?

� ��-��

iptables -t nat -A PREROUTING -i eth0 -s ! squid-box -p tcp --dport 80 -j DNAT --to squid-box:3128

...

�� squid + �� (garcia)

Fri, 04 Jan 2019 10:18:22 GMT

>> ��
>> [code]iptables -t nat -A PREROUTING -i eth0 ! -s 109.0.0.110 -p tcp
>> --dport 80 -j DNAT --to 109.0.0.110:3128[/code]
>> �� -�� ?
> �� -�� , �� , �
> �� . � ��, �� , �� .

��
[code]iptables -t nat -I PREROUTING -i eth0 ! -s 109.0.0.110 -p tcp --dport 80 -j DNAT --to 109.0.0.110:3128[/code]

�� ?

�� squid + �� (��)

Fri, 04 Jan 2019 10:03:12 GMT

> ��
> [code]iptables -t nat -A PREROUTING -i eth0 ! -s 109.0.0.110 -p tcp
> --dport 80 -j DNAT --to 109.0.0.110:3128[/code]
> �� -�� ?

�� -�� , �� , � �� . � ��, �� , �� .

OpenForum RSS: ���������� squid + ������

���������� squid + ������ (garcia)

���������� squid + ������ (garcia)

���������� squid + ������ (stalker37)

���������� squid + ������ (garcia)

���������� squid + ������ (garcia)

���������� squid + ������ (garcia)

���������� squid + ������ (������)

���������� squid + ������ (garcia)

���������� squid + ������ (������)

OpenForum RSS: �� squid + ��

�� squid + �� (garcia)

�� squid + �� (garcia)

�� squid + �� (stalker37)

�� squid + �� (garcia)

�� squid + �� (garcia)

�� squid + �� (garcia)

�� squid + �� (��)

�� squid + �� (garcia)

�� squid + �� (��)