From owner-freebsd-questions@FreeBSD.ORG Tue Sep 25 13:52:29 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C8D3B16A418 for ; Tue, 25 Sep 2007 13:52:29 +0000 (UTC) (envelope-from cuongvt@fpt.vn) Received: from isp-fcmail.FPT.NET (isp-fcmail.fpt.net [210.245.0.161]) by mx1.freebsd.org (Postfix) with ESMTP id D9E0013C48D for ; Tue, 25 Sep 2007 13:52:28 +0000 (UTC) (envelope-from cuongvt@fpt.vn) Received: from isp-mta1.fpt.vn ([210.245.0.180]) by isp-fcmail.FPT.NET with Microsoft SMTPSVC(6.0.3790.3959); Tue, 25 Sep 2007 20:52:25 +0700 Received: from [58.187.54.164] by isp-mta1.fpt.vn [210.245.0.180] Message-ID: <46F91290.7050500@fpt.vn> Date: Tue, 25 Sep 2007 20:52:16 +0700 From: vuthecuong User-Agent: Thunderbird 2.0.0.6 (X11/20070728) MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 25 Sep 2007 13:52:25.0456 (UTC) FILETIME=[4DCB0700:01C7FF7B] Subject: PF: block out port 80 so that not allow clients in LAN to browse Internet via port 80 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Sep 2007 13:52:29 -0000 Recently I used squid for cache proxy configured to go internet through port 3128. But internet browser in LAN still connect to Internet through port 80 if in conenction option of Internet browser is chose to connect directly to internet, not through proxy server. So how can I block out port 80 so that LAN clients must go to internet through port 3128 via proxy server? Tnx in advanced