This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

HTTP and Packet Filter

I am trying to disable http/https to the internet without proxy, but it doesnt work.
I have set up a packet filter rule that allows my Proxy to do http/https to anywhere and I denied http/https for the rest. But my Users are still able to surf without using the proxy server. The transparent proxy on my ASL Box is disabled.
Any Ideas ?

Dirk

This thread was automatically locked due to age.

Parents

0 TnM over 23 years ago

1) Remove masquerading from that box if it's not required.

2) Double-check you packet filtering rules. Make sure that you don't have a rule that give you user access to the external world before the rule that deny it.

Patrice.
Cancel
Vote Up 0 Vote Down

Cancel
0 dsachse over 23 years ago in reply to TnM

Hi,

1. Its enabled and I need it
2. I checked them twice and its still not working.

I have read something similar before here and I seems like that it is a bug or something.

Take a look here
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dsachse over 23 years ago in reply to TnM

Hi,

1. Its enabled and I need it
2. I checked them twice and its still not working.

I have read something similar before here and I seems like that it is a bug or something.

Take a look here
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 TnM over 23 years ago in reply to dsachse

In your iptables rule output from a shell what do you see? (iptables -Ln) or something like that.

You can have the same output from the packet filter live log menu if I remember properly.

Just analyse this and find out why packets are forwarded anyway. Figure out where your deny rule are coming out with that list..

Remember that packet will obey to the first rule listed out there.

Patrice.
Cancel
Vote Up 0 Vote Down

Cancel