господа горю.... помогите плз...
вобщем дело такое... нужно организовать локальной сети забирать почту с бесплатных почтовиков в инете (допустим mail.ru) с помощью оутлук либо бэт.
есть 2 интерфейса eth0-смотрит в инет и eth1-смотрит в локалку
таблица роутинга: [root@proxy sysconfig]# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 192.168.1.0 * 255.255.255.0 U 0 0 0 eth1 83.167.5.0 * 255.255.255.0 U 0 0 0 eth0 127.0.0.0 * 255.0.0.0 U 0 0 0 lo default 83.167.5.1 0.0.0.0 UG 0 0 0 eth0 [root@proxy sysconfig]#
в инет все ходят через сквид вот его конфиг: http_port 192.168.1.80:8080 dns_nameservers 83.167.0.2 #visible_hostname 192.168.0.111
acl all src 0.0.0.0/0.0.0.0 acl localnet src 192.168.1.0/255.255.255.0 http_access allow LocalNet http_access deny all
#acl ftpproto proto ftp #http_access allow Office ftpproto
acl Office src 192.168.1.1-192.168.1.254 http_access allow Office http_access deny all
hierarchy_stoplist cgi-bin ? acl QUERY urlpath_regex cgi-bin \? no_cache deny QUERY
acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl Safe_ports port 80 # http acl Safe_ports port 21 # ftp acl Safe_ports port 443 563 # https, snews acl Safe_ports port 70 # gopher acl Safe_ports port 210 # wais acl Safe_ports port 1025-65535 # unregistered ports acl Safe_ports port 280 # http-mgmt acl Safe_ports port 488 # gss-http acl Safe_ports port 591 # filemaker acl Safe_ports port 777 # multiling http acl CONNECT method CONNECT
icp_access allow all http_access allow !Safe_ports icon_directory /usr/share/squid/icons coredump_dir /var/spool/squid
# ICQ settings acl MY_USERS src 192.168.1.0/24 acl ICQ_DOMAIN dstdomain icq.com aol.com login.icq.com acl ICQ_ADDR dst 64.12.0.0/16 205.188.0.0/16 acl ICQ_PORT port 5190 acl ICQ_PROTO proto HTTPS http_access allow MY_USERS ICQ_ADDR ICQ_PORT ICQ_PROTO CONNECT always_direct allow ICQ_DOMAIN ICQ_PORT CONNECT always_direct allow ICQ_ADDR ICQ_PORT CONNECT acl CONNECT method CONNECT
ну и докучи правила iptableas: [root@proxy sysconfig]# iptables-save # Generated by iptables-save v1.3.0 on Thu Jul 6 11:14:52 2006 *mangle :FORWARD ACCEPT [0:0] :INPUT ACCEPT [30:2355] :OUTPUT ACCEPT [15:1444] :POSTROUTING ACCEPT [15:1444] :PREROUTING ACCEPT [30:2355] COMMIT # Completed on Thu Jul 6 11:14:52 2006 # Generated by iptables-save v1.3.0 on Thu Jul 6 11:14:52 2006 *nat :OUTPUT ACCEPT [1:124] :POSTROUTING ACCEPT [1:124] :PREROUTING ACCEPT [4:463] COMMIT # Completed on Thu Jul 6 11:14:52 2006 # Generated by iptables-save v1.3.0 on Thu Jul 6 11:14:52 2006 *filter :FORWARD ACCEPT [0:0] :INPUT ACCEPT [37:2635] :OUTPUT ACCEPT [29:3172] COMMIT # Completed on Thu Jul 6 11:14:52 2006 [root@proxy sysconfig]#
