Re: [squid-users] squid2.6STABLE13 and transparent proxy

melvin obiri escreveu:
> Thanks Leonardo,
>
> well, initially the
> http_port transparent 3128 was working fine then I thought maybe it
> makes my cache open for public.
>
    Get appropriate iptables rules for not allowing external access to
it. Get appropriate http_access rules for not allowing external access
to it.

    with those, there's absolutely no problem at all on letting squid
binding to all ports.

    anyway, you can easily let squid binding on your internal ip only.
Just change the REDIRECT for DNAT and you'll probably get everything
working !!!

-- 
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br
	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it