[sclug] Linux as router (Gateway Server)

Navneet navneetkc at gmail.com
Tue Feb 15 06:54:54 UTC 2005


> Feb 12 09:15:33 squid (squid): Cannot open HTTP Port
>
> Why my iptables rule blocking squid to open HTTP port.

[snip]

> -A OUTPUT -o eth1 -p tcp -m tcp --sport 1024:65535 --dport 80
> --tcp-flags SYN,RST,ACK SYN  -m owner --uid-owner squid -j ACCEPT
> -A OUTPUT -o eth1 -p tcp -m tcp --sport 1024:65535 --dport 443
> --tcp-flags SYN,RST,ACK SYN -m owner --uid-owner squid -j ACCEPT
> -A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
> COMMIT
> # Completed on Thu Feb 10 20:02:43 2005

>>Is squid being started as the 'squid' user, 'nobody', 'root' or something
>>else?

Squid being started as the "squid" user.

Didn't you notice, squid starts without any error when strict firewall rules
where flushed.



>Best Regards,
>Alex.

Thanks
Navneet


-- 
Alex Butcher      Brainbench MVP for Internet Security: www.brainbench.com
Bristol, UK                      Need reliable and secure network systems?
PGP/GnuPG ID:0x271fd950                         <http://www.assursys.com/>



More information about the Sclug mailing list