Re: Re: lug-bg: Local NAT to Proxy

[todorin@email.domain.hidden (Todor Belev)]

Uvi - podvodni kamyni na vsiaka stypka - ne moje da se invertira s ! kogato se matchva po owner ;(((

<p>iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner ! squid  -j DNAT --to 127.0.0.1:8080
Bad argument `squid'

<p><p><em class="quotelev1"> >-------- Îðèãèíàëíî ïèñìî --------
<em class="quotelev1"> >Îò:  Georgi Chorbadzhiyski <gf_at_unixsol.org>
<em class="quotelev1"> >Îòíîñíî: Re: lug-bg: Local NAT to Proxy
<em class="quotelev1"> >Äî: lug-bg_at_linux-bulgaria.org
<em class="quotelev1"> >Èçïðàòåíî íà: Íåäåëÿ, 2003, Þíè 15 13:19:49 EEST
<em class="quotelev1"> >----------------------------------
<em class="quotelev1"> >
<em class="quotelev1"> >Todor Belev wrote:
<em class="quotelev2"> >> Chudesno PAvka,
<em class="quotelev2"> >> Blagodaria i na Gerogi za ideiata.
<em class="quotelev2"> >> Obache tova deto mi go davash ti ne stava iasno kak tochno da se polzva - da markiram paketa na osnovanie user-a li , ili procesa i sled tova da go prekaram prez redirektvane na iptables ??
<em class="quotelev2"> >> Ami ako se smeni usera ?
<em class="quotelev2"> >> Ami ako se smeni browsera ?
<em class="quotelev2"> >> 
<em class="quotelev2"> >> Vsyshnost tova koeto dava georgi kato REDIRECT e chasten sluchai na DNAT kogato stava vypros za lokalen port - da raboti no e pochti syshtoto...
<em class="quotelev2"> >> 
<em class="quotelev2"> >> Ili dokolkoto razbiram Pavel, trebe za da ne se poluchava vtorichnoto zavyrtane na squida prez OUTPUT ruleto koeto redirektva vsychnost pak kym sebe si, da polzvam niakakvo markirane na generiraneto ot SQuida paketi - obache kak v cialata kartinka da se poluchi tova ?
<em class="quotelev2"> >> Krainiat efekt e mejdu drugoto Access deny kato otgovor ot Squida vypreki che politikata na http_access allow all.
<em class="quotelev1"> >
<em class="quotelev1"> >Porsto ukazhi paketite generirani ot squid user-a da ne se matchvat.
<em class="quotelev1"> >
<em class="quotelev1"> >iptables .... --owner ! squid .... -j REDIRECT .....
<em class="quotelev1"> >
<em class="quotelev1"> >
<em class="quotelev1"> >-- 
<em class="quotelev1"> >Georgi Chorbadzhiyski
<em class="quotelev1"> >http://georgi.unixsol.org/
<em class="quotelev1"> >
<em class="quotelev1"> >============================================================================
<em class="quotelev1"> >A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
<em class="quotelev1"> >http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
<em class="quotelev1"> >To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
<em class="quotelev1"> >============================================================================
<em class="quotelev1"> >

-----------------------------------------------------------------
http://www.MURA.bg - Ãìóðíè ñå â èãðàòà!
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================