Koozali.org: home of the SME Server

Coova Chilli

Offline gdbs

  • *
  • 96
  • +0/-0
Coova Chilli
« on: April 07, 2010, 06:26:55 PM »
Hi all :)

I have a problem with Coova Chilli.

I've installed it, everything works fine basiquely...

But when i try to add WebRequests squid parameter, it's like this parameter was bypass... nothing in access.log recorded... I've also tried to use dansguardian but same result.... nothing recorded in log file, nothing blocked  :-(

Any idea?

Thx a lot

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Coova Chilli
« Reply #1 on: April 07, 2010, 06:37:00 PM »
Hi.

- Have you run signal-event chilli-update after your modification ?
- Is your squid server enabled, and running in transparent mode ?

Regards
C'est la fin du monde !!! :lol:

Offline gdbs

  • *
  • 96
  • +0/-0
Re: Coova Chilli
« Reply #2 on: April 07, 2010, 07:13:17 PM »
yes and yes :)

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Coova Chilli
« Reply #3 on: April 07, 2010, 07:18:03 PM »
Code: [Select]
iptables -t nat -L PREROUTING_FROM_CHILLI -vn

You should see one line like this per authenticated client:

Code: [Select]
525 32460 DNAT       tcp  --  *      *       10.1.0.17            0.0.0.0/0           tcp dpt:80 to:10.1.0.1:3128

is it the case ?
C'est la fin du monde !!! :lol:

Offline gdbs

  • *
  • 96
  • +0/-0
Re: Coova Chilli
« Reply #4 on: April 08, 2010, 08:38:30 AM »
With Dansguardian (8080) working great on local interface,

Your command return this:

Code: [Select]
0     0 DNAT       tcp  --  *      *       10.1.0.10            0.0.0.0/0           tcp dpt:80 to:10.1.0.1:8080
But as you see... no traffic appears...

but i have this line below with traffic on it, changing when i surf the web with the chilli client:

Code: [Select]
73  4214 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0
« Last Edit: April 08, 2010, 01:44:58 PM by gdbs »

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: Coova Chilli
« Reply #5 on: April 14, 2010, 11:09:24 AM »
Hi.
So you're using dansguardian. Unfortunally, I don't use it, and I'm not sure what needs to be modified to make it working. I'll try to test it, but it'll take some time.
Sorry.
C'est la fin du monde !!! :lol: