Re: [squid-users] tcp_outgoing_address Not working
I think your acl lines are wrong. They should read: acl ip1 src 10.0.0.120 acl ip2 src 10.0.0.121 acl ip3 src 10.0.0.122 Regards HASSAN - Original Message - From: Chris Robertson crobert...@gci.net To: squid-users@squid-cache.org Sent: Wednesday, May 20, 2009 02:59 Subject: Re: [squid-users] tcp_outgoing_address Not working RSCL Mumbai wrote: Hi, I have setup tcp_outgoing_address as follows: --- acl ip1 myip 10.0.0.120 acl ip2 myip 10.0.0.121 acl ip3 myip 10.0.0.122 tcp_outgoing_address 10.0.0.120 ip1 tcp_outgoing_address 10.0.0.121 ip2 tcp_outgoing_address 10.0.0.122 ip3 -- I have route2 rules which will change the g/w IP for the packets based on the above rules. Example: if SRC=10.0.0.120 then G/w=10.0.0.1 etc tcp_outgoing_address does not seem to be working; Have you set server_persistent_connections off? How can I verify is the SOURCE_IP is manitained ? The manager interface will show IPs and port (both client and server) for current client connections. ELSE: Where else should I check to learn why the SRC IP is not maintained. Please help. Thx Vai Chris
Re: [squid-users] tcp_outgoing_address Not working
Nyamul Hassan wrote: I think your acl lines are wrong. They should read: acl ip1 src 10.0.0.120 acl ip2 src 10.0.0.121 acl ip3 src 10.0.0.122 If these IPs are assigned to the Squid box, then using myip acls is the correct method. The src acl checks against the IP address of the client connecting to Squid. Regards HASSAN Chris
Re: [squid-users] tcp_outgoing_address Not working
RSCL Mumbai wrote: Hi, I have setup tcp_outgoing_address as follows: --- acl ip1 myip 10.0.0.120 acl ip2 myip 10.0.0.121 acl ip3 myip 10.0.0.122 tcp_outgoing_address 10.0.0.120 ip1 tcp_outgoing_address 10.0.0.121 ip2 tcp_outgoing_address 10.0.0.122 ip3 -- I have route2 rules which will change the g/w IP for the packets based on the above rules. Example: if SRC=10.0.0.120 then G/w=10.0.0.1 etc tcp_outgoing_address does not seem to be working; Have you set server_persistent_connections off? How can I verify is the SOURCE_IP is manitained ? The manager interface will show IPs and port (both client and server) for current client connections. ELSE: Where else should I check to learn why the SRC IP is not maintained. Please help. Thx Vai Chris
[squid-users] tcp_outgoing_address Not working
Hi, I have setup tcp_outgoing_address as follows: --- acl ip1 myip 10.0.0.120 acl ip2 myip 10.0.0.121 acl ip3 myip 10.0.0.122 tcp_outgoing_address 10.0.0.120 ip1 tcp_outgoing_address 10.0.0.121 ip2 tcp_outgoing_address 10.0.0.122 ip3 -- I have route2 rules which will change the g/w IP for the packets based on the above rules. Example: if SRC=10.0.0.120 then G/w=10.0.0.1 etc tcp_outgoing_address does not seem to be working; How can I verify is the SOURCE_IP is manitained ? ELSE: Where else should I check to learn why the SRC IP is not maintained. Please help. Thx Vai
[squid-users] tcp_outgoing_address not working
Hey, I have the following lines in my squid.conf http_port XX.XX.XXX.XXX:5190 tcp_outgoing_address XX.XX.XXX.XXX MyUsers Where XX.XX.XXX.XXX is my target inbound and outbound IP address and MyUsers is the ACL containing my authenticated users. However, all outbound connections are going out on eth0 instead of eth0:6 which is the IP address I want to use. Any suggestions?
Re: [squid-users] tcp_outgoing_address not working
Bingo! Someone messed with the SNAT rules (we have a lot of them) and there was one with just the output device but no source IP that applied to the local traffic as well. :( Noob error that I missed that rule :/ Thanks :) Henrik Nordstrom wrote: tor 2007-03-01 klockan 18:37 +0100 skrev Bgs: Do you have any ideas why is squid sticking to the default system IP and not use any IP given in tcp_outgoing_address? Do you perhaps have any NAT masquerade rules messing things up? Regards Henrik
Re: [squid-users] tcp_outgoing_address not working
Really noone has any idea?! Bgs wrote: Upgraded to latest squid, same result. Squid still uses the wrong outgoing address whatever I set with tcp_outgoing_address :( Any ideas? Bgs wrote: Hi all, For some reason tcp_outgoing_address is not working for me, even though the setup is simple and look like just the zillion example configs I found around the net. Setup: Linux box with 2.5.STABLE13 and several outside IPs (single connection): 2: eth1: BROADCAST,MULTICAST,UP,1 mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:05:5d:64:89:a0 brd ff:ff:ff:ff:ff:ff inet 1.2.3.146/28 brd 1.2.3.159 scope global eth1 inet 1.2.3.147/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.148/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.149/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.150/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.151/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.152/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.153/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.154/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.155/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.156/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.157/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.158/28 brd 1.2.3.159 scope global secondary eth1 We used to NAT different internal IPs to different outside IPs, I want the same result with squid. Here is the relevant portion of my squid.conf: acl src_1 src 10.0.0.105 acl src_2 src 10.0.0.106 acl src_3 src 10.0.0.107 acl src_4 src 10.0.0.108 acl src_5src 10.0.0.109 acl src_6 src 10.0.0.110 acl src_7src 10.0.0.111 acl src_8 src 10.0.0.112 acl src_9src 10.0.0.113 acl src_10src 10.0.0.114 acl src_11src 10.0.0.115 acl src_bgstest src 10.0.0.136 tcp_outgoing_address 1.2.3.147 src_1 tcp_outgoing_address 1.2.3.148 src_2 tcp_outgoing_address 1.2.3.149 src_3 tcp_outgoing_address 1.2.3.150 src_4 tcp_outgoing_address 1.2.3.151 src_5 tcp_outgoing_address 1.2.3.152 src_6 tcp_outgoing_address 1.2.3.153 src_7 tcp_outgoing_address 1.2.3.154 src_8 tcp_outgoing_address 1.2.3.155 src_9 tcp_outgoing_address 1.2.3.156 src_10 tcp_outgoing_address 1.2.3.157 src_bgstest tcp_outgoing_address 1.2.3.146 Whatever IP I use, the source IP will be 1.2.3.146. The funny part comes now: I changed the last (default) rule to .148 and squid still uses the .146 address. Do you have any ideas why is squid sticking to the default system IP and not use any IP given in tcp_outgoing_address? Thanks Bgs
Re: [squid-users] tcp_outgoing_address not working
tor 2007-03-01 klockan 18:37 +0100 skrev Bgs: Do you have any ideas why is squid sticking to the default system IP and not use any IP given in tcp_outgoing_address? Do you perhaps have any NAT masquerade rules messing things up? Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel
Fw: [squid-users] tcp_outgoing_address not working
Hi Bags, You have to remove the src directly before the IP address in acl arguments. You can find similar story here: http://www.squid-cache.org/mail-archive/squid-users/200703/0268.html Best Regards. Alaa Ayad - Original Message - From: Henrik Nordstrom [EMAIL PROTECTED] To: Bgs [EMAIL PROTECTED] Cc: squid-users@squid-cache.org Sent: Tuesday, March 20, 2007 2:28 AM Subject: Re: [squid-users] tcp_outgoing_address not working tor 2007-03-01 klockan 18:37 +0100 skrev Bgs: Do you have any ideas why is squid sticking to the default system IP and not use any IP given in tcp_outgoing_address? Do you perhaps have any NAT masquerade rules messing things up? Regards Henrik
Re: [squid-users] tcp_outgoing_address not working
Upgraded to latest squid, same result. Squid still uses the wrong outgoing address whatever I set with tcp_outgoing_address :( Any ideas? Bgs wrote: Hi all, For some reason tcp_outgoing_address is not working for me, even though the setup is simple and look like just the zillion example configs I found around the net. Setup: Linux box with 2.5.STABLE13 and several outside IPs (single connection): 2: eth1: BROADCAST,MULTICAST,UP,1 mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:05:5d:64:89:a0 brd ff:ff:ff:ff:ff:ff inet 1.2.3.146/28 brd 1.2.3.159 scope global eth1 inet 1.2.3.147/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.148/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.149/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.150/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.151/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.152/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.153/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.154/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.155/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.156/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.157/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.158/28 brd 1.2.3.159 scope global secondary eth1 We used to NAT different internal IPs to different outside IPs, I want the same result with squid. Here is the relevant portion of my squid.conf: acl src_1 src 10.0.0.105 acl src_2 src 10.0.0.106 acl src_3 src 10.0.0.107 acl src_4 src 10.0.0.108 acl src_5src 10.0.0.109 acl src_6 src 10.0.0.110 acl src_7src 10.0.0.111 acl src_8 src 10.0.0.112 acl src_9src 10.0.0.113 acl src_10src 10.0.0.114 acl src_11src 10.0.0.115 acl src_bgstest src 10.0.0.136 tcp_outgoing_address 1.2.3.147 src_1 tcp_outgoing_address 1.2.3.148 src_2 tcp_outgoing_address 1.2.3.149 src_3 tcp_outgoing_address 1.2.3.150 src_4 tcp_outgoing_address 1.2.3.151 src_5 tcp_outgoing_address 1.2.3.152 src_6 tcp_outgoing_address 1.2.3.153 src_7 tcp_outgoing_address 1.2.3.154 src_8 tcp_outgoing_address 1.2.3.155 src_9 tcp_outgoing_address 1.2.3.156 src_10 tcp_outgoing_address 1.2.3.157 src_bgstest tcp_outgoing_address 1.2.3.146 Whatever IP I use, the source IP will be 1.2.3.146. The funny part comes now: I changed the last (default) rule to .148 and squid still uses the .146 address. Do you have any ideas why is squid sticking to the default system IP and not use any IP given in tcp_outgoing_address? Thanks Bgs
[squid-users] tcp_outgoing_address not working
Hi all, For some reason tcp_outgoing_address is not working for me, even though the setup is simple and look like just the zillion example configs I found around the net. Setup: Linux box with 2.5.STABLE13 and several outside IPs (single connection): 2: eth1: BROADCAST,MULTICAST,UP,1 mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:05:5d:64:89:a0 brd ff:ff:ff:ff:ff:ff inet 1.2.3.146/28 brd 1.2.3.159 scope global eth1 inet 1.2.3.147/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.148/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.149/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.150/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.151/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.152/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.153/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.154/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.155/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.156/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.157/28 brd 1.2.3.159 scope global secondary eth1 inet 1.2.3.158/28 brd 1.2.3.159 scope global secondary eth1 We used to NAT different internal IPs to different outside IPs, I want the same result with squid. Here is the relevant portion of my squid.conf: acl src_1 src 10.0.0.105 acl src_2 src 10.0.0.106 acl src_3 src 10.0.0.107 acl src_4 src 10.0.0.108 acl src_5src 10.0.0.109 acl src_6 src 10.0.0.110 acl src_7src 10.0.0.111 acl src_8 src 10.0.0.112 acl src_9src 10.0.0.113 acl src_10src 10.0.0.114 acl src_11src 10.0.0.115 acl src_bgstest src 10.0.0.136 tcp_outgoing_address 1.2.3.147 src_1 tcp_outgoing_address 1.2.3.148 src_2 tcp_outgoing_address 1.2.3.149 src_3 tcp_outgoing_address 1.2.3.150 src_4 tcp_outgoing_address 1.2.3.151 src_5 tcp_outgoing_address 1.2.3.152 src_6 tcp_outgoing_address 1.2.3.153 src_7 tcp_outgoing_address 1.2.3.154 src_8 tcp_outgoing_address 1.2.3.155 src_9 tcp_outgoing_address 1.2.3.156 src_10 tcp_outgoing_address 1.2.3.157 src_bgstest tcp_outgoing_address 1.2.3.146 Whatever IP I use, the source IP will be 1.2.3.146. The funny part comes now: I changed the last (default) rule to .148 and squid still uses the .146 address. Do you have any ideas why is squid sticking to the default system IP and not use any IP given in tcp_outgoing_address? Thanks Bgs
