LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   PPTPD and Squid proxy Routing (https://www.linuxquestions.org/questions/linux-networking-3/pptpd-and-squid-proxy-routing-4175449552/)

linuxakias 02-10-2013 10:22 AM

PPTPD and Squid proxy Routing
 
Hello,

I have a pptpd server and a squid server in to the same machine.

I want to send all internet traffic for VPN Clients 172.16.36.0/32 through Squid server

Until now Squid server working ok for internal lan, but only if i set to client the proxy settings.

Also the pptpd working ok. Clients may connect and access the internet normaly but not through Squid proxy.

The Server is a VPS on A KVM node with Bridge networking.

Thanks

acid_kewpie 02-11-2013 05:04 AM

I don't understand where you want help here. You want the clients to use the server side proxy right? so can they reach it or not? You've not actualyl said anythign about trying to use it once connected on pptp

linuxakias 02-11-2013 05:16 AM

Quote:

Originally Posted by acid_kewpie (Post 4888973)
I don't understand where you want help here. You want the clients to use the server side proxy right? so can they reach it or not? You've not actualyl said anythign about trying to use it once connected on pptp


My clients are able to connect to the PPTPD server and access the internet just fine. But not through the Squid!

:)

Thanks

acid_kewpie 02-11-2013 05:20 AM

so what does "not through squid" mean? What do your logs say? can you connect to it via telnet from the client?

linuxakias 02-11-2013 05:26 AM

Quote:

Originally Posted by acid_kewpie (Post 4888981)
so what does "not through squid" mean? What do your logs say? can you connect to it via telnet from the client?

The Squid access.log doesnt write anything, but from the client iam able to connect to the internet normal. And yes, i can connect just fine. I forgot to mention that the Squid server is in transparent mode.

acid_kewpie 02-11-2013 05:48 AM

hmm, slightly relevant that it's transparent...

so I guess your rewrite rule for squid is only listening on eth1 not pptp0 or whatever the interfaces are?

Transparent proxies suck. You should stop doing it transparently if AT ALL possible.

linuxakias 02-11-2013 06:16 AM

Quote:

Originally Posted by acid_kewpie (Post 4888998)
hmm, slightly relevant that it's transparent...

so I guess your rewrite rule for squid is only listening on eth1 not pptp0 or whatever the interfaces are?

Transparent proxies suck. You should stop doing it transparently if AT ALL possible.

Thats correct ! the ports is eth0 for the squid and pptp0 for clients

Unfortunately i need in transparent mode. Its absolutely necessary for the clients to be up and running at the time connected to the VPN server without extra settings.

acid_kewpie 02-11-2013 06:48 AM

right, so you need to change the iptables rule, right?

no extra settings? You can provide proxy details over DHCP. I've seen so so few instances where things have egnuinely had to be transparent.

linuxakias 02-11-2013 07:09 AM

Yeap thats correct :)


All times are GMT -5. The time now is 05:12 AM.