Hi ankush, I tryied the iptables rule you given but still i am not able to get the results.

On 2/1/08, ankush grover ankushsquid@gmail.com wrote:

On Fri, Feb 1, 2008 at 12:02 AM, Yogesh Patil yogesh@technotux.net wrote:

...

hi, I am using SQUID 2.6.STABLE17 with CentOS 5, & BIND DNS SERVER configured on the same box, i have configured squid as transparent proxy with all default settings , and applied iptables rule by using the following command

iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

i am able to browse http websites, but when i try to open https

sites, such as, gmail.com, hotmail.com etc.. i am not able to get any response from the proxy. i have also tryied with forwarding 443 (https) port to the 3128 (squid) port but still no success.

Hi Yogesh,

Try below iptables rules:

iptables -A FORWARD -p tcp -m multiport -s $LAN_NETWORK --dport $YAHOO_CHAT,$YAHOO_WEB_CAM -j ACCEPT

iptables -A FORWARD -p tcp -m multiport -s $LAN_NETWORK --dport $HTTPS,$HTTP -j ACCEPT

Ports for HTTPS="443",YAHOO_CHAT="5050",YAHOO_WEB_CAM="2047,2048,5100", where $LAN_NETWORK is your lan network for ex 192.168.1.0/24 .

Regards

Ankush