續-建置一部transparent proxy

root@bullock-desktop:/etc/network# cat /proc/sys/net/ipv4/ip_forward
0
root@bullock-desktop:/etc/network# echo "1" > /proc/sys/net/ipv4/ip_forward
root@bullock-desktop:/etc/network# cat /proc/sys/net/ipv4/ip_forward
1
root@bullock-desktop:/etc/network# modprobe ip_tables
root@bullock-desktop:/etc/network# modprobe ip_nat_ftp
root@bullock-desktop:/etc/network# modprobe ip_conntrack
root@bullock-desktop:/etc/network# modprobe ip_conntrack_ftp
root@bullock-desktop:/etc/network# modprobe ip_conntrack_irc
root@bullock-desktop:/etc/network# iptables -t nat -A PREROUTING -p tcp -s 10.1.128.0/22 --dport 80 -j REDIRECT --to-ports 3128
root@bullock-desktop:/etc/network# iptables -t nat -A POSTROUTING -o br0 -s 10.1.128.0/22 -j MASQUERADE
root@bullock-desktop:/etc/network# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
REDIRECT tcp -- 10.1.128.0/22 anywhere tcp dpt:www redir ports 3128

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE 0 -- 10.1.128.0/22 anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
root@bullock-desktop:/etc/network#