problem in iptables

[alvi]

i am asking a very little question
i am using squid on my cable net
now i open the forwarding and postrouting rules through iptables

now i want users browsing through squid proxy and voice chat,web sms, web cam etc through iptables

users are not allowed to use http request through iptables
what i can do know :
drop the 80 request in input cahin or forwarding chain

[adam7979]

users are not allowed to use http request through iptables

Then put -p 80 -j DROP right after initialization of iptables

[alvi]

dear send me the full path
iptables -t ??? --dport ?????

however i drop the request in forwarding policy but after this i was not able to send request on net

help me ...i dont want to use transparent proxy . i want to force users to user proxy server for http and ftp and want to force other request through iptables

[adam7979]

users are not allowed to use http request through iptables

add the following line into your iptables (as early as possible, right after iptable initialization is ok)

/sbin/iptables -A FORWARD --dport 80 -j DROP

or in more details:

iptables -A FORWARD -i eth2 -o eth0 -p tcp --dports 80,443,8080 -j REJECT --reject-with tcp-reset

will effectively block any forward request to the mentioned port

hope this helps