[squid-users] Re: Squid + DansGuardian + Bridging

From: psd17j-jacob <jacob.roebauer_at_gmail.com>
Date: Tue, 24 Sep 2013 10:37:35 -0700 (PDT)

Hey guys,

Thanks for all the suggestions and feedback. I really appreciate your time.
I'd like to stick to (attempting) to use DG because I've already come so
far. It just seems to be this little bridge issue. I followed the link and
added the following lines:

 ebtables -t broute -A BROUTING -i eth1 -p ipv4 --ip-proto tcp --ip-dport 80
-j redirect --redirect-target DROP

 ebtables -t broute -A BROUTING -i eth0 -p ipv6 --ip6-proto tcp --ip6-sport
80 -j redirect --redirect-target DROP

 ebtables -t broute -A BROUTING -i eth0 -p ipv4 --ip-proto tcp --ip-sport 80
-j redirect --redirect-target DROP

unfortunately that did not help. Do you have any other suggestions as to
what may help? The current rules are:

ebtables:

:BROUTING ACCEPT
-A BROUTING -p IPv4 --ip-proto tcp --ip-dport 80 -j redirect
-A BROUTING -p IPv4 --ip-proto tcp --ip-dport 443 -j redirect
-A BROUTING -p IPv4 -i eth1 --ip-proto tcp --ip-dport 80 -j redirect
--redirect-target DROP
-A BROUTING -p IPv6 -i eth0 --ip6-proto tcp --ip6-sport 80 -j redirect
--redirect-target DROP
-A BROUTING -p IPv4 -i eth0 --ip-proto tcp --ip-sport 80 -j redirect
--redirect-target DROP

iptables:

:OUTPUT ACCEPT [3:228]
-A PREROUTING -i br0.9 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080
-A PREROUTING -i br0.9 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8080
-A PREROUTING -p tcp -m tcp --dport 3128 -j REDIRECT --to-ports 8080

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-DansGuardian-Bridging-tp4662202p4662281.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Tue Sep 24 2013 - 17:38:31 MDT

This archive was generated by hypermail 2.2.0 : Wed Sep 25 2013 - 12:00:06 MDT