port 80 and 8080 iptables ??

["Daniel Negron/KBE" <danegron kbelectronics net>]

Hi all !

running squid here, everyone goes through the proxy fine. On the firewall
port 80 (client) is disabled.  Locally I can not access any websites and
even access local website.  using the proxy I have no problems.  if I
activate the port 80 client.  I can access internet locally and so can the
rest of the clients, if the use the firewall as a gateway.

how can I block users from using the firewall as a gateway and ONLY grant
the ability to use it as a proxy ?  Also please note that some users (MAC
users) need the ability to use FTP as a gateway.

any suggestion ?

OS RH7.3
firewall=iptables
proxy=squid
eth1=external card
eth0=internal card

**DAN**