Где ошибка? Не работает прозрачное проксирование работает если прописать в броузере обязательное проксирование
*nat :PREROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0]
# On web -A PREROUTING -i eth1 -p tcp -m tcp -d 192.168.0.3/32 --dport 80 -j ACCEPT
# Forward HTTP connections to Squid proxy -A PREROUTING -i eth1 -s 192.168.0.0/16 -d ! 192.168.0.3 -p tcp -m multiport --dport 80,81,82,83,88,8000,8001,8002,8080,8081 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth1 -s 192.168.0.0/16 -d ! 192.168.0.3 -p udp -m multiport --dport 80,81,82,83,88,8000,8001,8002,8080,8081 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth1 -s 192.168.0.0/16 -d ! 192.168.0.3 -p tcp -m multiport --dport 8082,8083,8091,8100,8101,8102,8103,8080,8888,777 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth1 -s 192.168.0.0/16 -d ! 192.168.0.3 -p udp -m multiport --dport 8082,8083,8091,8100,8101,8102,8103,8080,8888,777 -j REDIRECT --to-ports 3128
COMMIT
*filter :FORWARD ACCEPT [0:0] :INPUT DROP [0:0] :OUTPUT ACCEPT [0:0]
# Accept traffic from internal interfaces -A INPUT -p All -i eth1 -j ACCEPT -A INPUT -p All -i lo -j ACCEPT
# Accept traffic with the ACK flag set -A INPUT -p tcp -m tcp --tcp-flags ACK ACK -j ACCEPT
# Allow incoming data that is part of a connection we established -A INPUT -m state --state ESTABLISHED -j ACCEPT
# Allow data that is related to existing connections -A INPUT -m state --state RELATED -j ACCEPT -A FORWARD -m state --state RELATED -j ACCEPT
# Accept responses to DNS queries -A INPUT -p udp -m udp --dport 1024:65535 --sport 53 -j ACCEPT
# Accept responses to our pings -A INPUT -i eth2 -p icmp -m icmp -s XXX.XXX.XXX.XXX/32 --icmp-type echo-request -j ACCEPT -A OUTPUT -p icmp -m icmp -s YYY.YYY.YYY.YYY/32 -d XXX.XXX.XXX.XXX/32 --icmp-type echo-reply -j ACCEPT -A INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT
# Accept notifications of unreachable hosts -A INPUT -p icmp -m icmp --icmp-type destination-unreachable -j ACCEPT
# Accept notifications to reduce sending speed -A INPUT -p icmp -m icmp --icmp-type source-quench -j ACCEPT
# Accept notifications of lost packets -A INPUT -p icmp -m icmp --icmp-type time-exceeded -j ACCEPT
# Accept notifications of protocol problems -A INPUT -p icmp -m icmp --icmp-type parameter-problem -j ACCEPT COMMIT
