[squid-users] R: [squid-users] R: [squid-users] Which ports on my firewall for CACHE MANAGER?

From: Boniforti Flavio <boniforti.f@dont-contact.us>
Date: Thu, 11 Apr 2002 12:51:56 +0200

> If you're running iptables on your Squid box then you will

Yes, squid lives on my iptables-firewall-box

This is what I actually have for my INPUT Chain:

Chain INPUT (policy DROP 3466 packets, 578K bytes)
 pkts bytes target prot opt in out source
destination
2683K 1458M ACCEPT all -- * * 0.0.0.0/0
0.0.0.0/0 state RELATED,ESTABLISHED
  108 6937 ACCEPT all -- lo * 0.0.0.0/0
127.0.0.1
 6129 1160K ACCEPT all -- eth0 * 0.0.0.0/0
192.168.0.255
    0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0
0.0.0.0/0 icmp type 0
    1 64 ACCEPT icmp -- eth0 * 0.0.0.0/0
0.0.0.0/0 icmp type 8
    0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0
0.0.0.0/0 icmp type 4
    0 0 ACCEPT icmp -- eth0 * 0.0.0.0/0
0.0.0.0/0 icmp type 11
    0 0 ACCEPT tcp -- eth0 * 192.168.0.101
0.0.0.0/0 state NEW tcp dpt:22
    0 0 ACCEPT tcp -- eth0 * 192.168.0.121
0.0.0.0/0 state NEW tcp dpt:22
    0 0 ACCEPT tcp -- eth0 * 192.168.0.123
0.0.0.0/0 state NEW tcp dpt:22
    3 144 ACCEPT tcp -- eth0 * 192.168.0.124
0.0.0.0/0 state NEW tcp dpt:22
    0 0 ACCEPT tcp -- eth0 * 192.168.0.197
0.0.0.0/0 state NEW tcp dpt:22
   41 2192 ACCEPT tcp -- eth0 * 0.0.0.0/0
192.168.0.251 state NEW tcp dpt:25
    4 192 ACCEPT tcp -- eth0 * 0.0.0.0/0
192.168.0.252 state NEW tcp dpt:53
  615 41428 ACCEPT udp -- eth0 * 0.0.0.0/0
192.168.0.252 state NEW udp dpt:53
   13 616 ACCEPT tcp -- eth0 * 0.0.0.0/0
192.168.0.138 state NEW tcp dpt:80
  176 8448 ACCEPT tcp -- eth0 * 192.168.0.124
192.168.0.138 state NEW tcp dpt:3000
 2766 144K ACCEPT tcp -- eth0 * 0.0.0.0/0
192.168.0.138 state NEW tcp dpt:8080
    0 0 ACCEPT udp -- eth0 * 0.0.0.0/0
192.168.0.138 state NEW udp dpt:8080
    0 0 ACCEPT udp -- eth0 * 0.0.0.0/0
192.168.0.138 state NEW udp dpt:80

Where 192.168.0.138 MY PROXY is.

The OUTPU Chain has NO RESTRICTIONS (default policy= ACCEPT).

Thanx again
Received on Thu Apr 11 2002 - 04:51:22 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:31 MST