search for: tcp_outgoing_address

Hi to all For is just az concept question : There are a need to change something in Squid3 config when it are running in the same box as shorewall with 2 ISP ? I''ve been thinking in do this at home, as a proof of concept for future implememtations ... I allways use Roberto''s Debian package to implement Shorewall . Fábio Rabelo

i''m using one line on eth2 only for web traffic eth1 is my internal line and eth0 is my main line to internet . i''m marking packets like this i have default route on eth0 iptables -t mangle -A PREROUTING -i eth1 -p tcp --dport 80 -j MARK --set-mark 66 iptables -t mangle -A PREROUTING -i eth1 -p tcp --sport 80 -j MARK --set-mark 66 iptables -t mangle -A PREROUTING -i eth1

hi list, i need help i have two links LINK 1 Internet Linux ---- LAN LINK 2 i need that the traffic web goes to link 2 i use squid in the linux with transparent proxy i´ve tried to use squid parameter "tcp_outgoing_address" but it doesnt work. best regards -- --------------------------------------------------- Fabio S. Silva fabiofoz@gmail.com

hi all, We are using squid 25s1 with kernel 2.4.19 and iproute2(+julian''s Pathes) with the following acl.. acl short_path dst 128.0.0.0/8 tcp_outgoing_address myIp2nd short_path we are linked to 2 isp--one having satelite & the other OFC. We want the above mentioned network to go thru OFC(ispB) as the sibling resides there. But when i use squidclient mgr:server_list command i see that rtt is still 650ms which is the time taken by satelite prov...

..._IP_ROUTE_FWMARK=y > CONFIG_IP_ROUTE_MULTIPATH=y > CONFIG_IP_ROUTE_VERBOSE=y > # CONFIG_IP_PNP is not set > # CONFIG_NET_IPIP is not set > # CONFIG_NET_IPGRE is not set > > But no CONFIG_IP_ROUTE_MULTIPATH_CACHED. Ok -- in your squid.conf file, you might try setting ''tcp_outgoing_address'' to the IP address of the interface that you want squid to use. We saw a problem somewhat similar to yours on IRC this morning which was corrected by having the server bind to the correct local address. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shorelin...

Hi all Could someone please me with my current setup. I just got another DSL line and I have my routing and marking the packets etc so that I can decided the fate as to which ISP I would like to route my traffic out of etc. I managed to get squid to be used as a trasparent proxy, but im forced to use the default gw of the machine and for the likes of my I cant figure out to send traffic out

On 16.06.2016 20:51, Warren Young wrote: > On Jun 16, 2016, at 12:41 PM, Walter H.<walter.h at mathemainzel.info> wrote: >> On 16.06.2016 19:40, Frank Cox wrote: >>> On Thu, 16 Jun 2016 19:34:09 +0200 >>> Walter H. wrote: >>> >>>> Yes, but doesn't help ... >>>> the same before ... >>>> >>>> by the way, I

I found that in my kernel config : # CONFIG_NET_KEY is not set CONFIG_INET=y CONFIG_IP_MULTICAST=y CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_MULTIPLE_TABLES=y CONFIG_IP_ROUTE_FWMARK=y CONFIG_IP_ROUTE_MULTIPATH=y CONFIG_IP_ROUTE_VERBOSE=y # CONFIG_IP_PNP is not set # CONFIG_NET_IPIP is not set # CONFIG_NET_IPGRE is not set But no CONFIG_IP_ROUTE_MULTIPATH_CACHED. -----Message

...deny !safeportshttp_access deny CONNECT !sslports # Always allow localhost connectionshttp_access allow localhost request_body_max_size 0 KBreply_body_max_size 0 deny alldelay_pools 1delay_class 1 2delay_parameters 1 -1/-1 -1/-1delay_initial_bucket_level 100delay_access 1 allow all # Custom optionstcp_outgoing_address 192.168.0.1auth_param ntlm keep_alive on # These hosts do not have any restrictionshttp_access allow unrestricted_hosts# Always allow access to whitelist domainshttp_access allow whitelistauth_param ntlm program /usr/local/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmsspauth_param ntlm children 45...

Hi list... I work for a school in the netherlands with a 2mbit Internet uplink and about 3800 eager student who want to play games on the Internet using one of our 800 workstations. Problem was that those game playing students are concentrated in 2 of our 6 physical locations... and they consumed the bandwidth which the other location would like to use for educational purposes. The thing we did

Hello, I wonder if someone could use the TPROXY with Shorewall and transparent Squid  with using the routing rules on shorewall (tcrules) for hosts / networks (LAN) with multiples providers (WANs) directly from the internal network on port 80 (with TPROXY transparent squid or REDIRECT). On this issue, the routing rules is not work propertly because the source is the