Multiple networks with Squid and OpenBSD

blood_omen · 07-30-2007, 04:22 PM

Greetings,

I just installed and configured squid-2.6.STABLE9-transparent-snmp on OBSD 4.1, this machine has only one network interface with just one IP address.

The squid server is up and running cuz when I configure the browsers on PC on my network segment, which is the same network segment squid is installed on everything works like a charm; however when I configure squid to cache for another network segment and I configure a PC on that network segment squid denies the access, even though in the ACL I configured it to allow that network segment.

Here I include part of the squid.conf file so perhaps somebody can get a better idea.

Code:

http_port 8080 transparent

# Custom settings for my company      
acl my_dir src 192.168.253.0/255.255.255.0
acl my_dir src 172.50.76.0/255.255.254.0

http_access allow my_dir
http_access deny all

The proxy IP addres is 192.168.253.11, if I go to a machine wich IP is...let say, 192.168.253.9 the proxy works great, now, if I go to a machine whose IP is 172.50.76.10 it get an access denied message.

Any help on this matter will be appreciated,

Have a good day everyone.

gani · 08-07-2007, 06:42 AM

This is because you only have one physical network interface and I guess that you would need to add another one and the two assigned with its own IP segment.

Or experiment with OBSD's VLAN by reading vlan(4) and ifconfig(8).

-----