squid tcp_outgoing_address feature not working

naishal0748 · 04-14-2015, 06:17 PM

Hello,

I have setup squid transparent proxy with following configurations in centos 6.2 :

eth0 - LAN Network
eth1 - WAN1 - IP - 192.168.3.15 - Gateway IP - 192.168.3.1
eth2 - WAN2 - IP - 192.168.5.15 - Gateway IP - 192.168.5.1 (Default Gateway)

I want to route 10.2.0.0/16 traffic to WAN1

I have used my squid.conf file to mention that as below

acl localnet src 10.2.0.0/16

tcp_outgoing_address 192.168.3.15 localnet

But all the traffic is going through eth2 only. I want all the traffic to go through eth1 based on my source address.

I have already setup routing on my linux server for eth1 and eth2.

Someone please help.

estabroo · 04-16-2015, 08:50 AM

You can probably use iproute2 to handle this. After installing it:

add a routing table entry to /etc/iproute2/rt_tables, something like

Code:

10    squid

then add a default route for that table, you'll probably want to put this in some network script so it happens after a reboot

Code:

ip route add default via 192.168.3.1 table squid

and a rule to direct traffic to that table

Code:

ip rule add from 192.168.3.15 table squid

personally I'm a bit lazy and instead of looking up the appropriate script to put them in, since I'm on debian I just throw them in my interfaces file (but I'm using static interfaces as well)

excerpt from /etc/network/interfaces

Code:

auto eth1
iface eth1 inet static
  address 192.168.3.15
  netmask 255.255.255.0
  up ip route add default via 192.168.3.1 table squid
  up ip rule add from 192.168.3.15 table squid