Re: [squid-users] Re: [dansguardian] Re: DG without Squid

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sun, 24 May 2009 18:33:43 +1200

RSCL Mumbai wrote:
>> My recommendation is to get your routing issue (different source IPs to different ISPs) working first, and only then implement some kind of filtering. It's nice to "plan ahead" to try to ensure the solution to one problem doesn't "interfere" with the solution to the other problem. But don't fall into the trap of thinking there must be just one solution to the two separate problems (or even that the two solutions have anything to do with each other, which they may not).
>
>
> Hi,
>
> Without DG & Squid, IPRoute2 rules work great in routing requests via
> specific gateways based on SRC IP (client pc ip).
>
> The moment, squid is implemented, the rules stop to work. When I say
> "the rules stop to work", what I mean is -- all requests are routed
> via the default g/w. On analyzing, it was found that the SRC IP of the
> packes was always 127.0.0.1.
>
> In this given context, do you think there is any tweak in getting
> client PC (SRC IP) based routing via multiple ISPs
>
> Thanks for your inputs.
>
> Best regards,
> Vai

tcp_outgoing_address or tcp_outgoing_tos set based on "myip" ACL or
whatever. With matching routing rules to pass the packets as you please.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE15
   Current Beta Squid 3.1.0.8 or 3.0.STABLE16-RC1
Received on Sun May 24 2009 - 06:33:48 MDT

This archive was generated by hypermail 2.2.0 : Sun May 24 2009 - 12:00:01 MDT