ขอขุดมานิดนึงนะครับ คือของผมเองก้อเป็นแบบนี้เลยครับ แต่ผมใช้ ubuntu พอเปิดใช้ transparent จะเข้าเวบพวก hotmail ตามที่เจ้าของกระทู้บอกไม่ได้ แต่ปิด transparent แล้วกลับเข้าใช้ได้ปกติเลยครับ ผมคิดว่าน่าจะเป็นที่ firewall ไม่แน่ใจว่าไปเซ็ตอะไรผิดนะ แต่ผมก้อไม่ได้ตั้งกฏอะไรมากมายนะครับ เดี๋ยวเอา script iptables มาให้ดู
#!/bin/sh
#Clear old rule
iptables -F
iptables -F -t nat
#Set default rule
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
#set port forward for http ssl im
iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dport 80:89 -j REDIRECT --to-port 8080
iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dport 21,5977,10100 -j REDIRECT --to-port 2121
iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dport 443,554,563,1100,1250,9443,10104,20000 -j REDIRECT --to-port 8080
#iptables -t nat -A PREROUTING -i eth0 -p tcp -m multiport --dport 1863,6667,5050,5190 -j REDIRECT --to-port 16667
มีแค่นี้แหละท่าน admin ช่วยพิจารณาที
ลองเอา config นี้ไปประยุคย์ใส่ดูนะครับเข้าได้หมดใช้ได้หมดทุกอย่างครับ
http_port 0.0.0.0:3128
tcp_outgoing_address 0.0.0.0
udp_incoming_address 0.0.0.0
udp_outgoing_address 0.0.0.0
icp_port 0
# reply_body_max_size 0 allow all
# Time Out
request_timeout 5 minutes
forward_timeout 5 minutes
connect_timeout 5 minutes
peer_connect_timeout 1 minutes
pconn_timeout 120 seconds
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 2 minute
shutdown_lifetime 5 seconds
negative_ttl 2 minutes
negative_ttl 3 minutes
positive_dns_ttl 120 seconds
negative_dns_ttl 120 seconds
netdb_low 900
netdb_high 1000
client_db on
client_lifetime 1 day
# mark for no cache
hierarchy_stoplist cgi-bin ? localhost .asp .aspx .php .inf .dll .Xt .xtp .ini localhost php$ inf$ dll$ Xt$ xtp$ ini$ asp$ aspx$ patch_lv1
acl QUERY urlpath_regex cgi-bin \? localhost .asp .aspx .php .inf .dll .Xt .xtp .ini .exe localhost php$ inf$ dll$ Xt$ xtp$ ini$ asp$ aspx$ updatelist$ patch_lv1
no_cache deny QUERY
# OPTIONS WHICH AFFECT THE CACHE SIZE
# -----------------------------------
cache_mem 128 MB
cache_swap_low 98
cache_swap_high 99
memory_pools on
memory_pools_limit 64 MB
maximum_object_size 131072 KB
maximum_object_size_in_memory 32 KB
ipcache_size 4096
ipcache_low 98
ipcache_high 99
fqdncache_size 4096
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
# LOGFILE
# -------------------------------------
cache_dir aufs /var/spool/squid 20480 24 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
# mime_table /usr/share/squid/mime.conf
pid_filename /var/run/squid.pid
log_fqdn off
client_netmask 255.255.255.255
ftp_passive on
ftp_sanitycheck on
dns_nameservers 127.0.0.1 202.69.137.137 202.69.137.138
# OPTIONS FOR TUNING THE CACHE
# --------------------------------------
# refresh_pattern ^ftp: 10080 95% 241920 reload-into-ims override-lastmod
# refresh_pattern . 180 95% 120960 reload-into-ims override-lastmod
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 100
half_closed_clients off
# ACL CONTROLS
# —————————————————————
acl Manager proto cache_object
acl all src 0.0.0.0/0
acl localhost src 127.0.0.0/8
# webconfig: acl_start
acl webconfig_lan src 192.168.10.0/24
acl webconfig_to_lan dst 192.168.10.0/24
# webconfig: acl_end
acl our_networks src 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
acl All_Port port 1-65535
acl CONNECT method CONNECT
http_access allow Manager all
http_access deny manager
http_access allow webconfig_to_lan
http_access allow All_Port
http_access allow CONNECT All_Port
http_access allow localhost
http_access allow our_networks
http_access allow webconfig_lan
http_access deny all
http_reply_access allow all
icp_access allow all
# ADMINISTRATIVE PARAMETERS
# ------------------------------
cache_mgr por_pk@hotmail.com
visible_hostname cache.hadyaiinternet.com
# MISCELLANEOUS
# -------------------------------
logfile_rotate 3
log_icp_queries off
query_icmp off
buffered_logs off
reload_into_ims on
nonhierarchical_direct off
prefer_direct on
strip_query_terms off
pipeline_prefetch on
ie_refresh on
forwarded_for on
vary_ignore_expire on
store_dir_select_algorithm round-robin
ignore_unknown_nameservers on
header_access Allow allow all
header_access Authorization allow all
header_access Cache-Control allow all
header_access Content-Encoding allow all
header_access Content-Length allow all
header_access Content-Type allow all
header_access Date allow all
header_access Expires allow all
header_access Host allow all
header_access If-Modified-Since allow all
header_access Last-Modified allow all
header_access Location allow all
header_access Pragma allow all
header_access Accept allow all
header_access Accept-Charset allow all
header_access Accept-Encoding allow all
header_access Accept-Language allow all
header_access Content-Language allow all
header_access Mime-Version allow all
header_access Retry-After allow all
header_access Title allow all
header_access Connection allow all
header_access Proxy-Connection allow all
header_access All allow all
httpd_accel_host virtual
httpd_accel_port 0
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
# webconfig: http_port_start
http_port 192.168.10.254:3128
http_port 127.0.0.1:3128
# webconfig: http_port_end
แสดงกระทู้
