Ubuntu – Port Forwarding Custom ports using IPTables

squidUbuntu

I have a server that is setup with a squid proxy on ubuntu 9 and handles users browsing the net via squid, this is working perfectly for me.

Now a user on my network wants to use a application to connect to the net but the port the application uses is port 80. Since i dont want to allow them direct access to the internet how can i get the application to use the proxy server. Also will i need to modify the server in anyway.

Best Answer

Does this software need to send traffic inbound or outbound on port 80?

I'd suspect it would require the software to support using proxy servers unless it only requires outbound traffic and can work with transparent proxying with iptables. i.e. running squid on port 3128, then forward all port 80 traffic being routed from your network via the proxy, through 3128 and out to the internet instead.

[ iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 ]

Related Solutions

Using both domain users and local users for Squid authentication

Now, I need a way to allow access to users which don't have a domain account. Can this be done?

Yes.

How?

You can use an "external" ACL helper, which allows you to roll your own mechanism. See the Squid wiki "Multiple Source" entry for more details. This bit of pseudo-code lifted straight from there:

auth_param basic program /usr/local/bin/my-auth.pl
external_acl_type myAclType %SRC %LOGIN %{Proxy-Authorization} /usr/local/bin/my-acl.pl
acl MyAcl external myAclType
http_access allow MyAcl

... where my-auth.pl is a bit of perl script that performs the actual authentication, and returns OK or ERR as the result.

Squid – HTTPS Not Working in Transparent Proxy

HTTPS traffic can not be redirected transparently to a proxy. You need to find a way to configure the proxy settings on your devices. If it is not feasible, you have to forward HTTPS traffic directly to the Internet.

Best Answer

Related Solutions

Using both domain users and local users for Squid authentication

Squid – HTTPS Not Working in Transparent Proxy

Related Topic