Hi,

I am trying to install a squid proxy on my Linux 2.6.9-55.0.12.EL server. I have got 3 eth interfaces on the server. All I wana do is to pass on the same IP address to the remote website through squid that I made the request with.

So for example I had ip3 (10.10.10.3) in my browser proxy settings. The squid should not pass on the main IP of the server to the remote host. It should pass ip3.

These are the changes i've made in squid.conf. It only works if I access it using localhost as proxy. If i use a different IP if gives me Access Denied error. Could anyone please have a look and tell me what i've done wrong. This is my first time setting up a squid btw so sorry if i could not explain anything properly.


acl in_10_10_10_1 myip 10.10.10.1
tcp_outgoing_address 10.10.10.1 in_10_10_10_1
acl in_10_10_10_2 myip 10.10.10.2
tcp_outgoing_address 10.10.10.2 in_10_10_10_2
acl in_10_10_10_3 myip 10.10.10.3
tcp_outgoing_address 10.10.10.3 in_10_10_10_3


acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl CONNECT method CONNECT
http_access deny !Safe_ports

acl localips src 10.10.10.1/3
http_access allow localhost
http_access allow localips

http_access deny all



Many Thanks

can you clarify that localips acl? 10.10.10.1/3?? what's that meant to mean?

thats to allow all 3 IPs to connect to the proxy server. It was returning an Access denied error if i used any ip in proxy settings so i thought this would allow access to the IPs. It still didn't work though.

all three what ip's? 10.10.10.1/3 would cover ip addresses 0.0.0.1 through to 31.255.255.254... what are you valid client ip addresses?

I only have 3 eth interfaces on server. Each on its own IP from 10.10.10.1 to 10.10.10.3

well i guess you just don't understand CIDR and subnets, but anyway. what are your client ip addresses? your access lists are still relative to the actual client ip at this stage.

I would only be using the proxy from the same system. So there would be no other clients apart from the server itself.

o, this makes NO sense... you have a proxy with NO clients but three ethernet interfaces and you want to arbitrarily use those addresses on those seperate cards for web requests you'll make insternally to the machine?? wtf?? where are these requests going to? the world interweb? if so then those IP's are illegal anyway, and that's never going to work...

i'm sorry man i know its a bit confusing. Well, let me just try n explain it again.

I have a dedicated server with 2 additional IPs. I have some php code thats hosted on one of the domains on that server. The code just goes and fetches some content from a website. Now each time it fetches content it goes through the same IP. All I wana do is to enable the proxy server so that I can make the php code use a different IP each time. I've been trying to insall squid from past 3 days now since squid can bind to all the IPs if you have multiple eth interfaces and than I can chose in my php code which proxy IP I want to go through to fetch the content from the remote website.

Please let me know if its still not clear.