Le script de configuration du proxy SQUID
____________________________________________________
TABLE DES MATIERES :
____________________________________________________
#LAN
LAN_ADDR=***.***.*.*/**
#PROXY
PROXY_ADDR=***.***.*.***
#SERVER NNTP
NNTP_ADDR=***.**.**.**.**
#SERVER SMTP
SMTP_ADDR=***.**.**.**
#SERVER POP3
POP3_ADDR=***.**.**.**
#SERVER DNS
DNS_ADDR=***.*.*.**
# Mandrake-Security : if you remove this
comment, remove the next line too.
echo 1 >
/proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/ip_forward
#Flush IP tables NAT
iptables -t nat -F
#SMTP
iptables -t nat -A PREROUTING -i eth0 -s $LAN_ADDR
-p tcp --dport smtp -j DNAT --to-destination $SMTP_ADDR #server SMTP
iptables -t nat -A PREROUTING -i eth0 -s
$LAN_ADDR -p udp --dport smtp -j DNAT --to-destination $SMTP_ADDR #server SMTP
#NNTP
iptables -t nat -A PREROUTING -i eth0 -s
$LAN_ADDR -p tcp --dport nntp -j DNAT --to-destination $NNTP_ADDR #server NNTP
iptables -t nat -A PREROUTING -i eth0 -s
$LAN_ADDR -p udp --dport nntp -j DNAT --to-destination $NNTP_ADDR #server NNTP
#POP3
iptables -t nat -A PREROUTING -i eth0 -s
$LAN_ADDR -p tcp --dport pop3 -j DNAT --to-destination $POP3_ADDR #server POP3
iptables -t nat -A PREROUTING -i eth0 -s
$LAN_ADDR -p udp --dport pop3 -j DNAT --to-destination $POP3_ADDR #server POP3
#DNS
iptables -t nat -A PREROUTING -i eth0 -s
$LAN_ADDR -p udp --dport domain -j DNAT --to-destination $DNS_ADDR #server DNS
#SMTP
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p tcp --dport smtp -j SNAT --to-source $PROXY_ADDR #proxy SMTP
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p udp --dport smtp -j SNAT --to-source $PROXY_ADDR #proxy SMTP
#NNTP
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p tcp --dport nntp -j SNAT --to-source $PROXY_ADDR #proxy NNTP
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p udp --dport nntp -j SNAT --to-source $PROXY_ADDR #proxy NNTP
#POP3
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p tcp --dport pop3 -j SNAT --to-source $PROXY_ADDR #proxy POP3
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p udp --dport pop3 -j SNAT --to-source $PROXY_ADDR #proxy POP3
#DNS
iptables -t nat -A POSTROUTING -s
$LAN_ADDR -p udp --dport domain -j SNAT --to-source $PROXY_ADDR #proxy DNS