how to bypass squid proxy to particular client

roopakl · 07-27-2012, 07:21 AM

Hi All,
I have configured squid transparent proxy(squid3-3.1.19) server on ubuntu 12.04 and everything is working fine.
By default all LAN user's port 80 request is redirecting to squid port 3128. But I don't want to redirect one of the client(172.16.0.*/16)'s port 80 request to 3128 and server should be working as only router to only that particular machine(172.16.0.*/16) and also there won't be any squid logs for this particular IP, which means I want to send port 80 request or all port requests that are coming from 172.16.0.*/16 to internet directly.
So is it possible to achieve this either using iptables rules or squid ACLs.
Thanks in advanse for your kind help.

acid_kewpie · 07-27-2012, 07:43 AM

well clearly you can't bypass squid with squid config, but yes you can certainly change the redirection rule to exclude that IP, just add "-s ! 172.16.12.34" to the entry.

I wouldn't generally suggest that you shoudln't bypass squid though, but give it special rules within squid with an ACL.

roopakl · 07-27-2012, 09:52 AM

Thanks acid_kewpie

Quote:

just add "-s ! 172.16.12.34" to the entry.

Could please mention where I have to add this entry i.e

Code:

FORWARD chain?
or
nat table?

I request you to post the full command.

acid_kewpie · 07-27-2012, 01:07 PM

well it's the nat table your redirect to port 3128 is on isn't it?

roopakl · 07-27-2012, 09:52 PM

Quote:

Originally Posted by acid_kewpie

well it's the nat table your redirect to port 3128 is on isn't it?

Yes acid_kewpie, it is on, how can I prevent by redirecting port 80 request from 172.16.0.128/16 machine to squid port 3128.
I request you to post the command.

Code:

172.16.0.128/16 --->port 80 request--->should directly goes to internet.
not like below
172.16.0.128/16 --->port 80 request--->squid port 3128--->internet

roopakl · 07-29-2012, 11:56 PM

May I get your kind help for the above?

acid_kewpie · 07-30-2012, 02:00 AM

you already have a redirect rule, just add the bit I gave you on to it.