problem ze squidem

[Sławek Owoc]

> Spróbuj jeszcze:

> acl our_networks src 192.168.0.0/24
> http_access allow our_networks

teraz mam :
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl our_networks src 192.168.1.0/24
http_access allow our_networks
http_access allow localhost
http_access deny all

znalazlem jeszcze takie cos, pomimo wlaczenia ON dalej w logach mam
tylko polaczenia z IP 192.168.1.1
log_ip_on_direct on #bylo off

fragment access.log

192.168.1.1 - - [21/Jun/2005:09:49:47 +0200] "GET http://www.google.pl/search? HTTP/1.1" 403 1433 TC
P_MISS:DIRECT
192.168.1.1 - - [21/Jun/2005:09:49:50 +0200] "GET http://www.google.com/search? HTTP/1.0" 403 1330 T
CP_DENIED:NONE
192.168.1.1 - - [21/Jun/2005:09:49:50 +0200] "GET http://www.google.com/search? HTTP/1.1" 403 1435 T
CP_MISS:DIRECT
192.168.1.1 - - [21/Jun/2005:09:49:51 +0200] "GET http://www.google.com/search? HTTP/1.1" 403 1441 T
CP_NEGATIVE_HIT:NONE
192.168.1.1 - - [21/Jun/2005:09:49:52 +0200] "GET http://www.google.com/search? HTTP/1.1" 403 1441 T
CP_NEGATIVE_HIT:NONE


a taka regulka iptables przekierowuje ruch z LAN (192.168.1.xxx) do
proxy 192.168.1.119
$IPTABLES -A PREROUTING -t nat --in-interface eth2 --protocol tcp --destinatination-port 80  --jump DNAT --to-destination 192.168.1.119:8080

ale mimo wszystko dalej mam dostep zabroniony :((
jak jednoznacznie wykluczyc wine firewalla albo squida ?


-- 
Pozdrowienia,
 Sławek Owoc