RE: [squid-users] How do I hide port 3128?

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 13 May 2005 01:24:50 +0200 (CEST)

On Thu, 12 May 2005, Chris Robertson wrote:

>> I need a rule in Iptables to block that port from external inquiry, only
>> Squid, on the same machine, should be able to see it. How do I do that?
>
> Something like:
>
> iptables -A INPUT -i eth0 --dport 3128 -j REJECT

Good except that it for practical reasons need to go into the nat table
just before the REDIRECT rule..

iptables -t nat -I PREROUTING -i eth0 --dport 3128 -j DROP

Regards
Henrik
Received on Thu May 12 2005 - 17:24:52 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Jun 01 2005 - 12:00:02 MDT