eth0 Link encap:Ethernet HWaddr 00:0C:29:CA:12:A9
inet addr:10.254.254.10 Bcast:10.254.254.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:feca:12a9/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:87 errors:0 dropped:0 overruns:0 frame:0
TX packets:102 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:9421 (9.2 KiB) TX bytes:7727 (7.5 KiB)
Interrupt:18 Base address:0x2000

eth1 Link encap:Ethernet HWaddr 00:0C:29:CA:12:B3
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:feca:12b3/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:68 errors:0 dropped:0 overruns:0 frame:0
TX packets:60 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:5490 (5.3 KiB) TX bytes:5196 (5.0 KiB)
Interrupt:16 Base address:0x2080

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:40 errors:0 dropped:0 overruns:0 frame:0
TX packets:40 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:2400 (2.3 KiB) TX bytes:2400 (2.3 KiB)

[root@localhost ~]# iptables-save -c
# Generated by iptables-save v1.4.5 on Fri Aug 27 18:41:15 2010
*mangle
:PREROUTING ACCEPT [164:13746]
:INPUT ACCEPT [71:6805]
:FORWARD ACCEPT [99:7097]
:OUTPUT ACCEPT [71:4792]
:POSTROUTING ACCEPT [170:11889]
[0:0] -A PREROUTING -d 192.168.0.0/24 -p tcp -m tcp --dport 80 -j ACCEPT
[9:432] -A PREROUTING -s 192.168.0.0/24 -p tcp -m tcp --dport 80 -j QUEUE
[0:0] -A PREROUTING -s 192.168.0.0/24 -p tcp -m tcp --dport 3128 -j QUEUE
COMMIT
# Completed on Fri Aug 27 18:41:15 2010
# Generated by iptables-save v1.4.5 on Fri Aug 27 18:41:15 2010
*nat
:PREROUTING ACCEPT [19:1324]
:POSTROUTING ACCEPT [10:600]
:OUTPUT ACCEPT [49:3348]
[9:432] -A PREROUTING -s 192.168.0.0/24 ! -d 192.168.0.0/24 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128
[55:3781] -A POSTROUTING -o eth0 -j SNAT --to-source 10.254.254.10
COMMIT
# Completed on Fri Aug 27 18:41:15 2010
# Generated by iptables-save v1.4.5 on Fri Aug 27 18:41:15 2010
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [53:3934]
[51:5758] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
[0:0] -A INPUT -p icmp -j ACCEPT
[10:600] -A INPUT -i lo -j ACCEPT
[0:0] -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
[12:723] -A INPUT -j REJECT --reject-with icmp-host-prohibited
[0:0] -A INPUT -i lo -j ACCEPT
[0:0] -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
[0:0] -A INPUT -s 192.168.0.0/24 -p tcp -m tcp --dport 3128 -j ACCEPT
[99:7097] -A FORWARD -j QUEUE
[20:1000] -A OUTPUT -o lo -j ACCEPT
[0:0] -A OUTPUT -p tcp -m tcp --sport 22 -j ACCEPT
[0:0] -A OUTPUT -d 192.168.0.0/24 -p tcp -m tcp --sport 3128 -j QUEUE
COMMIT
# Completed on Fri Aug 27 18:41:15 2010

[root@localhost ~]# ip route
10.254.254.0/24 dev eth0 proto kernel scope link src 10.254.254.10
192.168.0.0/24 dev eth1 proto kernel scope link src 192.168.0.1
169.254.0.0/16 dev eth0 scope link metric 1002
169.254.0.0/16 dev eth1 scope link metric 1003
default via 10.254.254.1 dev eth0

to_install_dir="/opt/traffpro"
daemon=true
db_url=localhost
db_usr=root
db_passwd=
db_name=traffpro
time_in=15
time_out=360
control_eth_addr=true
net_number=0
ports_detail=true
ss_enabled=false
eth_out=eth0
url_detail=true
out_ip=10.254.254.10
listen_addr=127.0.0.1
listen_port=9999
ip_queue_maxlen=2048000
squid_connect=false
timer=false

iptables -A INPUT -m tcp -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -m tcp -p tcp --sport 22 -j ACCEPT
iptables -t mangle -A PREROUTING -p tcp --dport 80 -d 192.168.0.0/255.255.255.0 -j ACCEPT
iptables -t mangle -A PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp --dport 80 -j QUEUE
iptables -t mangle -A PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp --dport 3128 -j QUEUE
iptables -t nat -A PREROUTING -m tcp -p tcp -s 192.168.0.0/255.255.255.0 -d ! 192.168.0.0/255.255.255.0 --dport 80 -j REDIRECT --to-ports 3128
iptables -A INPUT -s 192.168.0.0/255.255.255.0 -m tcp -p tcp --dport 3128 -j ACCEPT
iptables -A OUTPUT -p tcp -d 192.168.0.0/255.255.255.0 --sport 3128 -j QUEUE

C:Documents and SettingsAdministrator>tracert ya.ru

Трассировка маршрута к ya.ru [77.88.21.3]
с максимальным числом прыжков 30:

1 <1 мс <1 мс <1 мс 192.168.0.1
2 1 ms <1 мс <1 мс 10.254.254.1
3 * * * Превышен интервал ожидания для запроса.
4 4 ms 4 ms 4 ms 95.154.112.1
5 5 ms 5 ms 4 ms brynner-vlv-ix.yandex.net [193.232.136.33]
6 136 ms 135 ms 135 ms korolev-vlan846.yandex.net [213.180.208.38]
7 135 ms 135 ms 141 ms grechko-vlan120.yandex.net [87.250.233.125]
8 137 ms 137 ms 138 ms toyota-vlan4.yandex.net [213.180.210.181]
9 140 ms 136 ms 140 ms www.yandex.ru [77.88.21.3]

Трассировка завершена.