November 30, 2015, 03:11:35 PM

News : Linux Help Community Forum..

Author Topic: iptables question.  (Read 1209 times)

Offline nondescriptcitizens

  • New Member
  • Posts: 1
iptables question.
« on: December 04, 2012, 02:48:42 AM »
I am setting up a new squid daemon to run on my server.  I want to make sure that everyone inside my network can access squid but I want to make sure everyone on the internet is blocked.

eth0 is connected to my internal LAN via:
eth1 is connected to the internet via:
Squid listens on port 3124

So far I have the following script for my iptables.

iptables -F
iptables -t nat -F
iptables -X
iptables -P FORWARD DROP
iptables -P INPUT DROP
iptables -A INPUT -p tcp --dport 3124 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

Is this correct? Will this allow all my LAN users access to squid while blocking outward attempts from the net to my server?
Thanks in advance!


Offline keen_prat

  • Linux Noob !
  • *
  • Posts: 21
Re: iptables question.
« Reply #1 on: December 07, 2012, 06:53:30 AM »
As far as I know, you don't need to take all that trouble, in squid.conf  you can set it to listen to local IP only and thats it.