05.11.2025 23:37, Stuart Henderson пишет:
you can try something like

pass out from wg0 route-to 192.168.66.1 scrub (max-mss 1300)
It's working!!! Thank's a lot!

On 2025-11-05, kasak <[email protected]> wrote:
Hello misc!

I'm struggling with unusual task, maybe somebody can help me with it.

I have wireguard interface:

/etc/hostname.wg0:

inet 192.168.66.2 255.255.255.0 NONE
wgkey (cropped)
wgport 51820
wgpeer (cropped) wgaip 192.168.66.1/32 wgaip 0.0.0.0/0

I actually can add route to some ip through this tunnel. For example if
i add

route add 1.1.1.1 192.168.66.1

tracepath will show me that path is going through wg0.

So I thought, that would be perfect if I could make a squid proxy
through this tunnel.

I launched squid and set browser to use it.
Everything was fine.
After that I've added

tcp_outgoing_address 192.168.66.2

to squid.conf and it stopped working, shows me 503 on all pages.

I asked google, but unfortunate, nobody tried to achieve this on openbsd.

I've tried to add default route through vpn, with high prio. But it
didn't help either

route add default 192.168.66.1 -priority 10


Of course I can launch another squid on remote host and add cache_peer
to squid.
But for the sake of interest it want to try without it.

There is a lot of very educated people in this list! Share the wisdow
with me! Thank's!




Reply via email to