Please note the new address for this forum : forum.excito.org. The old address redirects here but I don't know for how long. Thanks !
New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

Changes for squid blocking web administration

Got problems with your B2 or B3? Share and get helped!
Post Reply
jmilton
Posts: 13
Joined: 13 May 2012, 04:52

Changes for squid blocking web administration

Post by jmilton »

Hi,

I have a B3 configured as a router and wifi access point.

I installed squid as a caching proxy as per these instructions :
http://wiki.excito.org/wiki/index.php/I ... oxy_Server

I set up iptables as per the referenced link :
| Alternatively use this method which is better: http://wiki.squid-cache.org/ConfigExamp ... uxRedirect

Web access and caching works well except if I log into B3 via the web interface as admin and select the cog icon to make administrative changes, then the B3 does not respond. Everything else on the web interface seems to work.

If I undo the changes for squid (by changing the iptables cmds to use -D instead of -A) and stop squid then I regain access to the administrative page.

I want to be able to do admin with the squid cache in place. What changes do I need to make?

Thanks in advance
jmilton
Posts: 13
Joined: 13 May 2012, 04:52

Re: Changes for squid blocking web administration

Post by jmilton »

Here is a solution.

Instead of setting up IPTABLEs as per the page linked to the excito wiki, I followed the instructions here :
http://www.dd-wrt.com/wiki/index.php/Sq ... rent_Proxy

I replaced these lines with the correct IP address and subnet masks :
LAN_IP=`nvram get lan_ipaddr`
LAN_NET=$LAN_IP/`nvram get lan_netmask`

I don't understand all the subtleties of IPTABLEs but I suspect the difference is on how traffic directed to the proxy's IP address is treated.

* Fixes access to web admin
* Also fixes discovery of the B3 samba drive from Opensuse12.1, which for some reason would not work with the original IPTABLEs settings

:D
Post Reply