April 26, 2024, 02:57:16 AM

News : LinuxSolved.com Linux Help Community Forum..


Author Topic: Direct connection through squid proxy box to a single ip  (Read 4791 times)

Offline baskarss

  • Linux Noob !
  • *
  • Posts: 4
Direct connection through squid proxy box to a single ip
« on: March 21, 2005, 04:17:49 AM »
Dear Sir(s),
This I am posting again as i find recent postings deleted in the forum.
Right , Here we use Red hat linux server as firewall and use squid as proxy to connect to internet.
All clients are able to access net , but only http is alllowed.
Now my boss wants to connect to other too , like ftp(flashfxp) , dc++ , mirc and other p2p and what not .......
he wants it to be connected to net , as if it is directly connected over there.
i.e. not through the proxy.
Can someone help me out in detail how to do that please ?
I do not want others to bypass the proxy and want only one system(ip) to do that .
Please help me in detail
Thanks in advance.

Offline Ricky

  • LST CareTaker
  • Specially Skilled
  • *****
  • Posts: 2381
Direct connection through squid proxy box to a single ip
« Reply #1 on: March 22, 2005, 03:36:16 PM »
Yes.. unfortunately this site was hacked and we have lost few recent posts.

I had answered your post earlier . Anyways again I am here!

What I am understanding that you have configured simple proxy , it means you have configured each cleint's browser so they are only allow to access http.

What you want is simply do NAT only for 1 ip. Well I am not strong in that but you need a simple iptable rule..

Here I am assuming xxx.xxx.xxx.xxx as ur boss ip and yyy.yyy.yyy.yyy as your public ip of the box on which  you will use and which is connected directly to internet!
simply execute below line and hope it will do the job !

Code: [Select]

iptables -t nat -A POSTROUTING -s yyy.yyy.yyy.yyy \
    -j SNAT --to xxx.xxx.xxx.xxx

Offline baskarss

  • Linux Noob !
  • *
  • Posts: 4
Thank you
« Reply #2 on: March 23, 2005, 09:38:28 AM »
Thanks Ricky ,
for the support . I will try out and let you know , but may take some time , I am a bit away.
Thanks again