iptables help

[Brian Cluff]

My guess is that your iptables rule is a little too generic and is 
shoving everything through dansguardian no matter where it comes from or 
heading to... something like if you see traffic destined for port 80 
redirect it to dansguardian.

If thats the case, you might want to change that rule to specify that 
you only want port 80 forwarded if the packets come in from eth0,
or change the rule say not your ip address of your external IP
or put in a rule above your redirect rule specifically accepting traffic 
for port 80 when destined for your external IP or eth1

Brian Cluff

On 04/28/2011 05:41 PM, Nathan England wrote:
> I'm running a fedora 14 machine with eth0 being internal and eth1
> being external. It is setup for transparent proxying with dansguardian
> and squid. All works well. I also have apache running for web
> development on port 80, and I can access it. However, I want to access
> that web server from the outside world. I cannot for the life of me
> (atleast within the limits of my patience) get port 80 open on the
> external interface so I can access the web server.
>
> Can anyone offer some advice to make iptables show me some love? Or
> can I not do this all on the one machine?
>
>