PPTPD and Squid proxy Routing

linuxakias · 02-10-2013, 10:22 AM

Hello,

I have a pptpd server and a squid server in to the same machine.

I want to send all internet traffic for VPN Clients 172.16.36.0/32 through Squid server

Until now Squid server working ok for internal lan, but only if i set to client the proxy settings.

Also the pptpd working ok. Clients may connect and access the internet normaly but not through Squid proxy.

The Server is a VPS on A KVM node with Bridge networking.

Thanks

acid_kewpie · 02-11-2013, 05:04 AM

I don't understand where you want help here. You want the clients to use the server side proxy right? so can they reach it or not? You've not actualyl said anythign about trying to use it once connected on pptp

linuxakias · 02-11-2013, 05:16 AM

Quote:

Originally Posted by acid_kewpie

I don't understand where you want help here. You want the clients to use the server side proxy right? so can they reach it or not? You've not actualyl said anythign about trying to use it once connected on pptp

My clients are able to connect to the PPTPD server and access the internet just fine. But not through the Squid!

Thanks

acid_kewpie · 02-11-2013, 05:20 AM

so what does "not through squid" mean? What do your logs say? can you connect to it via telnet from the client?

linuxakias · 02-11-2013, 05:26 AM

Quote:

Originally Posted by acid_kewpie

so what does "not through squid" mean? What do your logs say? can you connect to it via telnet from the client?

The Squid access.log doesnt write anything, but from the client iam able to connect to the internet normal. And yes, i can connect just fine. I forgot to mention that the Squid server is in transparent mode.

acid_kewpie · 02-11-2013, 05:48 AM

hmm, slightly relevant that it's transparent...

so I guess your rewrite rule for squid is only listening on eth1 not pptp0 or whatever the interfaces are?

Transparent proxies suck. You should stop doing it transparently if AT ALL possible.

linuxakias · 02-11-2013, 06:16 AM

Quote:

Originally Posted by acid_kewpie

hmm, slightly relevant that it's transparent...

so I guess your rewrite rule for squid is only listening on eth1 not pptp0 or whatever the interfaces are?

Transparent proxies suck. You should stop doing it transparently if AT ALL possible.

Thats correct ! the ports is eth0 for the squid and pptp0 for clients

Unfortunately i need in transparent mode. Its absolutely necessary for the clients to be up and running at the time connected to the VPN server without extra settings.

acid_kewpie · 02-11-2013, 06:48 AM

right, so you need to change the iptables rule, right?

no extra settings? You can provide proxy details over DHCP. I've seen so so few instances where things have egnuinely had to be transparent.

linuxakias · 02-11-2013, 07:09 AM

Yeap thats correct