From owner-freebsd-questions@FreeBSD.ORG  Thu May 31 17:13:37 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 5149616A421
	for <freebsd-questions@freebsd.org>;
	Thu, 31 May 2007 17:13:37 +0000 (UTC)
	(envelope-from spap13@googlemail.com)
Received: from wa-out-1112.google.com (wa-out-1112.google.com [209.85.146.182])
	by mx1.freebsd.org (Postfix) with ESMTP id 31DE313C46C
	for <freebsd-questions@freebsd.org>;
	Thu, 31 May 2007 17:13:37 +0000 (UTC)
	(envelope-from spap13@googlemail.com)
Received: by wa-out-1112.google.com with SMTP id m33so314321wag
	for <freebsd-questions@freebsd.org>;
	Thu, 31 May 2007 10:13:37 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta;
	h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type;
	b=crUUmvz4Q7YG94cA+BqrKtihe/gLoOqdCKHDCsCu4xGNgn/rviSYSD6LKQ+PRuEEL1ZsECd0hmwp4+NLVIpwjByi0blv3N+Vs2asP40nQQcThUUG3KAswauGzBzoAqs6m96lxE/NzhX+37KsqD6LmzdIfI0KFkHl0rlzAePZ48I=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta;
	h=received:message-id:date:from:to:subject:mime-version:content-type;
	b=VYYy1Wrg5gBJGeTl8jCIJLY+wvMTlPbs4jdW/vgUpxCBBBM8YMFkaiECcGP9dNSYh2gmv9x797bcRmHbJnG31uKrm6eZSfkObUzM1dGiaoIdzBEL5yw6vhAGCub6T7eQGIa9w53Np+Fs0yHCA6430mta6PMRrXccFSoO7fdUUis=
Received: by 10.115.76.1 with SMTP id d1mr795426wal.1180631616736;
	Thu, 31 May 2007 10:13:36 -0700 (PDT)
Received: by 10.114.79.6 with HTTP; Thu, 31 May 2007 10:13:36 -0700 (PDT)
Message-ID: <dab71e150705311013g74c5f32v3ca7a018a26ecc83@mail.gmail.com>
Date: Thu, 31 May 2007 13:13:36 -0400
From: "Spiros Papadopoulos" <spap13@googlemail.com>
To: "freebsd mailing list" <freebsd-questions@freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: Squid and IPFW
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 31 May 2007 17:13:37 -0000

Dear all,

I would like to setup a gw / firewall (IPFW) which will also run Squid, in
order to restrict access to certain websites
or to allow certain workstations to have full access to the internet.
How can I redirect all traffic going to port 80 on the gw, to port 3128 on
Squid without setting this on each workstation?
I know this can be done with iptables but i don't want to use iptables on
this one...

Thanks in advance
Spiros P.