Re: [squid-users] (SOLVED, I hope) ACL rules allow localhost, but I still get an Access Denied in transparent setup...

From: GoogleGuy <googleguy@dont-contact.us>
Date: Mon, 30 Jul 2007 21:00:05 +0300

On Mon, 30 Jul 2007 19:41:27 +0200
Henrik Nordstrom <henrik@henriknordstrom.net> wrote:

> > You mean with iptables or can I set this up with Squid's ACL?
>
> It's mainly iptables, using the owner match..

This really should be on the Wiki pages or in the docs! Doesn't anyone
use Squid as a personal proxy from localhost?

Thanks for all your help, Henrik, this is finally solved (or so I hope,
works now, anyway):

iptables -t nat -A OUTPUT -o $INTERNET_DEVICE -p tcp --dport 80 \
        -m owner --uid-owner $PROXY_USER_UID -j ACCEPT

iptables -t nat -A OUTPUT -o $INTERNET_DEVICE -p tcp --dport 80 \
-j REDIRECT --to-port $SQUID_PORT

Andrei
Received on Mon Jul 30 2007 - 11:58:12 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Aug 01 2007 - 12:00:04 MDT