Re: [squid-users] squid sessions behind NAT

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 17 Feb 2012 11:36:59 +1300

On 17/02/2012 8:32 a.m., Vyacheslav Maliev wrote:
> 2012/2/14 Matus UHLAR - fantomas:
>> On 11.02.12 07:36, Vyacheslav Maliev wrote:
>>> Hi! Tell me please, how i could delimit sessions in session helper for
>>> users behind the NAT against proxy squid? For example, users connect
>>> to proxy squid server throught VPN by router and they have one IP
>>> address for squid after NAT. If i need to show splash page for the
>>> each user, what can i do?
>>
>> configure them to authenticate and configure splash page per user, not per
>> IP.
>>
>> Or, make them all have different IP visible by squid.
> Thanks for your answer, but both variants are not suitable in my
> situation. My proxy is working in transparent mode and there is not
> possible to authenticate in this mode as i know. I can`t expose
> networks behind routers because there might be duplicated networks and
> routes.

Those were your only options. NAT has erased the packet identity details
which provide alternative options.

PS. I assume from your mention of NAT and "transparent" that you
actually meant "transparent *interception* mode" proxy. As opposed to
transparent configuration, and transparent authentication with Squid.

Amos
Received on Thu Feb 16 2012 - 22:37:08 MST

This archive was generated by hypermail 2.2.0 : Fri Feb 17 2012 - 12:00:03 MST