<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Nat -&gt; dansguardian -&gt; squid -&gt; firewall rules?]]></title><description><![CDATA[<p dir="auto">Hi all</p>
<p dir="auto">i have dansguardian running on port 8888 the LAN interface of my pfsensel, which forwards the traffic to squid running on loopback 3128. To redirect incoming http traffic on the LAN interface I have a NAT rule which forwards dest port 80 to  8888 (DG).</p>
<p dir="auto">As far as is understand, firewall rules are applied after NAT. I tried a lot of combinations but none worked (like * or 127.0.0.1 as source ip address). What source ip address on which interface do I have to choose, to apply rules after DG/Squid?</p>
<p dir="auto">Thanks a lot for your support,<br />
inorx</p>
]]></description><link>https://forum.netgate.com/topic/81192/nat-dansguardian-squid-firewall-rules</link><generator>RSS for Node</generator><lastBuildDate>Thu, 15 Oct 2026 07:56:15 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/81192.rss" rel="self" type="application/rss+xml"/><pubDate>Sat, 14 Mar 2015 19:57:07 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Nat -&gt; dansguardian -&gt; squid -&gt; firewall rules? on Sat, 21 Mar 2015 16:03:16 GMT]]></title><description><![CDATA[<p dir="auto">Hi all</p>
<p dir="auto">does no reply mean, there is no solution or did i post it in the wrong category or did i ask a wrong question or …?</p>
<p dir="auto">Thx, inorx</p>
]]></description><link>https://forum.netgate.com/post/529821</link><guid isPermaLink="true">https://forum.netgate.com/post/529821</guid><dc:creator><![CDATA[inorx]]></dc:creator><pubDate>Sat, 21 Mar 2015 16:03:16 GMT</pubDate></item></channel></rss>