bridge firewall wont DNAT http to proxy

bridge firewall wont DNAT http to proxy

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
bridge firewall wont DNAT http to proxy Ricardo Meechan 03-21-2007
Posted by Ricardo Meechan on March 21, 2007, 4:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi all, hope you can help me with this little problem!


For the past couple of years we have had a linux machine (fedora) running as
a bridged/transparent router between our windows servers (that has a public
IP) and the gateway router (provided by BT).

Everything has been great but I'm looking to add a little more
functionality...

I want all http 80 traffic that is about to leave the network (entering the
bridged router) to redirect into another server running squid.

The problem is the routing of data.

I have tried many options but to no avail.

I added the following rule to the nat prerouting using only one of the
servers as a source for testing.:

-A PREROUTING -p tcp -s 194.72.xxx.xxx --dport 80 -j DNAT --to-destination
192.168.x.x:80

But nothing happens. I tried the destination address as a 194.72 but it also
didnt work.

Routes are all working and the servers/squid/bridge (has a local ip on br0)
can talk to each other ok. ipv4 forwarding is enabled.



I probably haven't been detailed enough but if anyone has any solutions or
require more info then I would really really appreciate your help!


Many thanks in advance!

rico.




[root@xxxxxxx~]# ifconfig
br0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet6 addr: fe80::202:b3ff:feb4:6020/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:26881 errors:0 dropped:0 overruns:0 frame:0
TX packets:10798 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1813830 (1.7 MiB) TX bytes:2222767 (2.1 MiB)

br0:0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet addr:192.168.xxx.xxx Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

br0:1 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet addr:194.72.xxx.xxx Bcast:194.72.111.191
Mask:255.255.255.240
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

eth0 Link encap:Ethernet HWaddr 00:02:B3:B4:60:20
inet6 addr: fe80::202:b3ff:feb4:6020/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:141519 errors:0 dropped:0 overruns:0 frame:0
TX packets:139218 errors:0 dropped:0 overruns:0 carrier:0
collisions:1176 txqueuelen:1000
RX bytes:21761332 (20.7 MiB) TX bytes:111661372 (106.4 MiB)

eth1 Link encap:Ethernet HWaddr 00:02:B3:B4:60:21
inet6 addr: fe80::202:b3ff:feb4:6021/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:157758 errors:0 dropped:0 overruns:0 frame:0
TX packets:143081 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:112414496 (107.2 MiB) TX bytes:21491683 (20.4 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:50 errors:0 dropped:0 overruns:0 frame:0
TX packets:50 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:4510 (4.4 KiB) TX bytes:4510 (4.4 KiB)

iptables:







Similar ThreadsPosted
New Proxy - http://techlock.info October 26, 2007, 10:33 am
Re: ???? New fast proxy http://sitepeek.info ???? February 11, 2008, 8:46 am
Re: ???? New fast proxy http://sitepeek.info ???? February 16, 2008, 11:28 pm
ZoneAlarm Update Wont Install September 7, 2006, 12:42 pm
Why wont this IPTables script work correctly August 16, 2007, 4:15 pm
DNAT and SNAT ??? January 5, 2009, 6:43 am
Firewall and bridge.sys September 6, 2005, 9:49 am
Transparent (bridge) firewall November 15, 2004, 7:11 pm
iptables -> masquerade/ snat or dnat problems.. November 22, 2006, 4:51 am
BRIDGE.DLL what is it..? August 13, 2005, 10:21 am

The site map in XML format XML site map

Contact Us | Privacy Policy