Re: [gentoo-user] Re: iptables + dansguardian + squid

[Joseph]

On 04/10/09 03:46, james wrote:
>Joseph <syscon780 <at> gmail.com> writes:
>
>>
>> I was following this guide to set it up home filter: iptables, DansGuardian,
>and Squid.
>> http://www.linux.com/articles/113733
>
>Here's a link to get you started....
>
>http://www.gentoo-wiki.info/Dansguardian

Thanks, yes I looked at them; the Gentoo wiki doesn't works: old, obsolete.

The one from linux.com is working but in my case I had a problem loading the iptables rules as after upgrading kernel to 2.6.27-gentoo-r8 it seems to me 
they have re-arrange the iptable modules around and I was missing in the kernel:
CONFIG_NETFILTER_XT_MATCH_OWNER=y
without it you can not load:
iptables -t nat -A OUTPUT -p tcp --dport 80 -m owner --uid-owner squid -j ACCEPT
iptables -t nat -A OUTPUT -p tcp --dport 3128 -m owner --uid-owner squid -j ACCEPT

Now it works.

-- 
Joseph