Re: NoCat and Squid how?

"Wilson Hernandez - MSD, S. A." <[email protected]> Tue, 25 Nov 2008 18:55:42 -0400
Newsgroups gmane.network.nocat
Organization MSD, S. A.
Message-ID <[email protected]>
Systemsx.

I was able to get squid and nocat working together but, not the way you
posted here. All I did was:

Insert my fw script at the end of the initialize.fw file.

The initialize.fw script first flushes all the rules and restart all the
iptables stuff.

My setup is working, it took me a while to get it working correctly.

I block all traffic I want from within my fw script.

Thanks.

systemx wrote:
> Hi,
> I use NoCat with Squid3.
> and I tried to find same solution. and not easy to find.
> 
> But now I work fine.
> 
> here is my access.fw
> 
> /usr/local/nocat/bin/access.fw
> 
>    Mark outbound traffic from this node.
>    #### add this for squid ### eth0 is my internal network
>    iptables -t nat $cmd PREROUTING -i eth0 -p tcp -m tcp -m state
> --state NEW $match_mac --dport 80 -j REDIRECT --to 3128
>    ####
>    iptables -t mangle $cmd NoCat $match_mac -s $ip -j MARK --set-mark $mark
> 
>    # Mark inbound traffic to this node.
>    #### and this for returns
>    iptables -t mangle $cmd NoCat -d $ip -j MARK --set-mark $mark
>    ####
>    iptables -t filter $cmd NoCat_Inbound -d $ip -j ACCEPT
> 
> This works wtih squid3 very fine.
> 
> And now I'm trying to combine squid3 with squidguard.
> To restart squid3 takes 30sn. it's so long.
> I hope squidguard make it fast.
> I never need squidguard before and now i think i need.
> 
> How do you block web sites?
> How do you allow some special ones?
> Is there a better way? better than squidguard? or else?
> 
> Thanks,
> And hope my access.fw helps to you.
> Regards.
> 
> 
> 2008/11/19 Wilson Hernandez - MSD, S. A. <[email protected]>:
>> Hello again.
>>
>> Now that I finally got Nocat working to my specs I need it to work along
>> with squid3. How can this be done? Anyone got it working with squid?
>>
>> Thanks in advanced for all your help.
>>
>> _______________________________________________
>> NoCat mailing list
>> [email protected]
>> http://lists.nocat.net/mailman/listinfo/nocat
>>
> 
> 
> 
> Bulent DALDAL
> .. linux for life ..
> 
> 

-- 
*Wilson Hernandez*
Presidente
829.848.9595
809.766.0441
www.msdrd.com <http://www.msdrd.com>
Conservando el medio ambiente


-- 
*Wilson Hernandez*
Presidente
829.848.9595
809.766.0441
www.msdrd.com <http://www.msdrd.com>
Conservando el medio ambiente