[squid-users] Help about iptable squid

Dear All:

Linux has three card:
One is 192.168.1.250 (Internet) by 192.168.1.1
The other two are: 192.168.2.1, 192.168.3.1
Client: 192.168.2.100-192.168.2.200 / IP 192.168.3.100-192.168.3.200

I have a few questions
1: I'm in the allocation of time, add squid --enable-underscore options
    But on a visit to the site is still has underlined
2: why Teamviever software from external links, always break, then cannot connect
    But, I have broken the network ,configuration files below

http_port 3128

ipcache_size 1024

ipcache_low 90

ipcache_high 95

cache_mem 128 MB

cache_dir ufs /var/spool/squid 4096 16 256

cache_effective_user squid

cache_effective_group squid

dns_nameservers 192.168.1.10

httpd_accel_host virtual

httpd_accel_port 80

httpd_accel_with_proxy on

httpd_accel_uses_host_header on

cache_access_log /var/log/squid/access.log

cache_log /var/log/squid/cache.log

cache_store_log /var/log/squid/store.log

visible_hostname gw.efc.cory

cache_mgr kavin_at_everfocus.com.cn

acl 2 src 192.168.2.100-192.168.2.200/32

http_access allow 2

acl 3 src 192.168.3.100-192.168.3.200/32

http_access allow 3

acl all src 0.0.0.0/0.0.0.0

acl localhost src 127.0.0.1/255.255.255.255

http_access allow localhost

http_access deny all





*mangle
:PREROUTING ACCEPT [11949307:8517837757]
:INPUT ACCEPT [61863944:9774933638]
:FORWARD ACCEPT [11730595:8495305567]
:OUTPUT ACCEPT [40941:4437279]
:POSTROUTING ACCEPT [11214754:8468974725]
COMMIT
*nat
:PREROUTING ACCEPT [694231:44896066]
:POSTROUTING ACCEPT [71812:4199611]
:OUTPUT ACCEPT [1788:412902]
-A POSTROUTING -m iprange --src-range 192.168.3.100-192.168.3.200 -o eth0 -j SNAT --to-source 192.168.1.250
-A POSTROUTING -m iprange --src-range 192.168.2.100-192.168.2.200 -o eth0 -j SNAT --to-source 192.168.1.250
-A PREROUTING -i eth2 -p tcp -m iprange --src-range 192.168.3.100-192.168.3.200 --dport 80 -j REDIRECT --to-ports 3128
-A PREROUTING -i eth1 -p tcp -m iprange --src-range 192.168.2.100-192.168.2.200 --dport 80 -j REDIRECT --to-ports 3128
COMMIT
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [37276:4032229]
-A INPUT -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -m limit --limit 10/sec
-A INPUT -i lo -j ACCEPT
-A INPUT -p udp -m multiport --dports 53,123,161,162,500,1701,1194,1993 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 80,53,8080,3128,9101,9102,9103 -j ACCEPT
-A INPUT -s 168.95.1.1 -j ACCEPT
-A INPUT -s 168.95.192.1 -j ACCEPT
-A INPUT -s 211.72.67.226 -j ACCEPT
-A INPUT -s 216.146.35.35 -j ACCEPT
-A INPUT -s 216.146.36.36 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 168.95.1.1 -j ACCEPT
-A FORWARD -s 168.95.192.1 -j ACCEPT
-A FORWARD -s 211.72.67.226 -j ACCEPT
-A FORWARD -s 216.146.35.35 -j ACCEPT
-A FORWARD -s 216.146.36.36 -j ACCEPT
-A FORWARD -d 168.95.1.1 -j ACCEPT
-A FORWARD -d 168.95.192.1 -j ACCEPT
-A FORWARD -d 211.72.67.226 -j ACCEPT
-A FORWARD -d 216.146.35.35 -j ACCEPT
-A FORWARD -d 216.146.36.36 -j ACCEPT
-A FORWARD -m iprange --src-range 192.168.2.100-192.168.2.200 -d 192.168.1.176 -j ACCEPT
-A FORWARD -s 192.168.10.0/24 -j ACCEPT
-A FORWARD -s 192.168.11.0/24 -j ACCEPT
-A FORWARD -d 192.168.10.0/24 -j ACCEPT
-A FORWARD -d 192.168.11.0/24 -j ACCEPT
-A FORWARD -s 10.8.0.0/24 -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -d 211.157.108.130 -j ACCEPT
-A FORWARD -d 220.128.204.167 -j ACCEPT
-A FORWARD -d 211.72.67.227 -j ACCEPT
-A FORWARD -d 211.72.67.226 -j ACCEPT
-A FORWARD -d 220.128.204.163 -j ACCEPT
-A FORWARD -d 61.66.137.4 -j ACCEPT
-A FORWARD -d 61.66.137.3 -j ACCEPT
-A FORWARD -d 61.66.137.5 -j ACCEPT
-A FORWARD -p udp -m multiport --dports 53,123,137,138 -j ACCEPT
-A FORWARD -p tcp -m multiport --dports 20,21,53,139,445,1863,5900,3128,8080 -j ACCEPT
-A FORWARD -m iprange --src-range 192.168.3.100-192.168.3.200 -p tcp -m multiport --dports 80,443,25,110 -j ACCEPT
-A FORWARD -m iprange --src-range 192.168.2.100-192.168.2.200 -p tcp -m multiport --dports 80,443,25,110 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT





Hope everybody to help me to solve it
Thank

Kavin
Received on Thu Apr 22 2010 - 04:57:06 MDT