sad/firehol
1
0
Fork 0
mirror of https://github.com/firehol/firehol.git synced 2024-06-30 19:02:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added transparent_squid

Browse Source
This commit is contained in:
ktsaou 2003-01-07 16:02:37 +00:00
parent 4c0c1ff168
commit 8997228ec3
1 changed files with 22 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
doc/commands.html
View File

@ -369,6 +369,27 @@ Subcommands must be given within <a href="primary_commands">Primary commands</a>
Finally, the <b>masquerade</b> helper will turn on <a href="#FIREHOL_NAT">FIREHOL_NAT</a> and instruct the kernel to do packet forwarding (like the <a href="#router">router</a>
commands do).
<p>
<hr noshade size=1 width="100%">
<a name="transparent_squid"><h3><b>transparent_squid</b> <font color="red">&lt;port&gt; &lt;user&gt;</font> [optional rule parameters]</h3></a>
The <b>transparent_squid</b> helper sets up trasparent caching for HTTP traffic.
The squid proxy is assumed to be running on the firewall host at port <b>port</b>, with the credentials of the local user <b>user</b> (normally user is <b>squid</b>).
<p>
The <b>transparent_squid</b> helper can be used for two kinds of traffic:
<ul>
<li>Incomming HTTP traffic, either targeted to the firewall host or passing through the firewall host.
<br>The optional rule parameters can be used to specify which kind of <b>incomming</b> traffic to be catched (by using <a href="#inface">inface</a>,
<a href="#src">src</a>, <a href="#dst">dst</a>, etc -- <a href="#outface">outface</a> should not be used here, because the rules generated are placed before
the routing decision and therefore the outgoing interface is not yet known).
<br>&nbsp;
</li>
<li>Locally generated outgoing HTTP traffic, except HTTP traffic generated by the <b>user</b> argument. Optional rule parameters are ignored for this type of traffic.
This makes it possible to support transparent caching for WEB browsers running on the firewall host, as far as they do not run as the user squid runs.
<br>&nbsp;
</li>
</ul>
<p>
<table border=0 cellpadding=10 cellspacing=0 width="100%"><tr bgcolor="#777777"><td align=center><font color="white"><b><big><a name="actions">Actions</a></td</tr></table>
<small>
@ -841,7 +862,7 @@ Normally, all FireHOL commands are designed so that if you specify a parameters
<tr><td align=center valign=middle>
<A href="http://sourceforge.net"><IMG src="http://sourceforge.net/sflogo.php?group_id=58425&amp;type=5" width="210" height="62" border="0" alt="SourceForge Logo"></A>
</td><td align=center valign=middle>
<small>$Id: commands.html,v 1.11 2003/01/07 01:52:39 ktsaou Exp $</small>
<small>$Id: commands.html,v 1.12 2003/01/07 16:02:37 ktsaou Exp $</small>
<p>
<b>FireHOL</b>, a firewall for humans...<br>
&copy; Copyright 2002