Re: [squid-users] squid transparent nat interception

From: Eliezer Croitoru <>
Date: Wed, 29 Aug 2012 14:20:34 +0300

On 8/29/2012 1:15 PM, Pawel Mojski wrote:
> iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to
> i have strange error.
it means that every packet the will go to port 80 will be redirected to
squid ip+port and it means that the packets from squid are the same and
will be looped.
you should use the "-j REDIRECT instead of -j DNAT .
also I recommend you to be explicit about the interface and ip's that
will be intercepted by the proxy.

iptables -t nat -A PREROUTING -i eth1 -s ! -d -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8081


Eliezer Croitoru
IT consulting for Nonprofit organizations
eliezer <at>
Received on Wed Aug 29 2012 - 11:21:04 MDT

This archive was generated by hypermail 2.2.0 : Wed Aug 29 2012 - 12:00:08 MDT