Re: [squid-users] 2 internet lines with ONE proxy control

From: Amos Jeffries <squid3@dont-contact.us>
Date: Mon, 20 Aug 2007 22:27:54 +1200

Kenny Lee wrote:
> Hi Amos,
>
> thank for the reply ... please help to correct me if my below settings
> is wrong ...
> Info:
> Internet line 1 IP = 123.123.123.123
> Internet line 2 IP = 111.111.111.111
>
> # settings in squid.conf
> acl user_group1 src 10.0.0.0/255.255.255.0
> acl user_group2 src 10.0.1.0/255.255.255.0
> tcp_outgoing_address 123.123.123.123 user_group1
> tcp_outgoing_address 111.111.111.111 user_group2
>

Looks right to me.

>
> how about the port? let say that if i have set it to 81, mean that all
> user groups also use the same port eventhough go out to internet with
> difference lines?

I'm not sure if you are asking how to split by port or asking if it matters?
The answer to both is the ACLs, whatever they are configured for will be
the filter. That config doesn't check ports, but you can easily write
another that does.

To-squid and from-squid are seperate.

Amos

>
> Thank you
>
> Regards,
> Kenny
>
>
> ----- Original Message ----- From: "Amos Jeffries" <squid3@treenet.co.nz>
> To: "Kenny Lee" <kenny.lee@esmtt.com>
> Cc: <squid-users@squid-cache.org>
> Sent: 2007-08-20 12:34 PM
> Subject: Re: [squid-users] 2 internet lines with ONE proxy control
>
>
>>> Hi all,
>>>
>>> i wish to put 2 internet lines connect to one Squid Proxy Server, i like
>>> to
>>> have some controls which like below .. anyway can squid proxy handle
>>> this
>>> kind of control?
>>>
>>> User A, B, C only can access to internet by using Internet Line 1 (which
>>> those users unable to access line 2)
>>> User D, E, F only can access to internet by using Internet Line 2 (which
>>> those users unable to access line 1)
>>>
>>> what is the settings i need to set in squid.conf ... please help ..
>>>
>>
>> tcp_outgoing_address along with some acl's
>>
>> Details are at:
>> http://www.squid-cache.org/Versions/v2/2.6/cfgman/
>> http://www.squid-cache.org/Versions/v3/3.0/cfgman/
>>
>> Amos
>>
>>
>
Received on Mon Aug 20 2007 - 04:28:01 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Sep 01 2007 - 12:00:03 MDT