<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.1">
</HEAD>
<BODY>
Have you tried adding a route to that interface? I'm thinking without one it's just using NAT. <BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<BR>
</TD>
</TR>
</TABLE>
<BR>
<BR>
On Wed, 2008-06-11 at 10:01 -0400, Olding, Jim wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">I have a CentOS box running 2 instances of Squid, each one bound to a</FONT>
<FONT COLOR="#000000">separate interface:</FONT>
<FONT COLOR="#000000">Eth0 - 10.254.2.54 - 'Filtered' squid instance</FONT>
<FONT COLOR="#000000">Eth0:0 - 10.254.2.56 - 'Unfiltered' squid instance</FONT>
<FONT COLOR="#000000">The filtering is actually done by a web appliance which looks at the</FONT>
<FONT COLOR="#000000">source IP of HTTP requests and determines if they should be forwarded,</FONT>
<FONT COLOR="#000000">filtered for content, or blocked.</FONT>
<FONT COLOR="#000000">The issue I'm running into is that if a user is on the Unfiltered</FONT>
<FONT COLOR="#000000">instance, Squid is using the IP of the main interface (eth0) and not the</FONT>
<FONT COLOR="#000000">virtual interface it is bound to (eth0:0) for outbound requests.</FONT>
<FONT COLOR="#000000">Therefore, the web filter appliance sees the request coming from</FONT>
<FONT COLOR="#000000">10.254.2.54, which matches its 'web filter' rule, and it blocks some</FONT>
<FONT COLOR="#000000">things that shouldn't be blocked.</FONT>
<FONT COLOR="#000000">Does anyone know any way to get squid to maintain the IP address of the</FONT>
<FONT COLOR="#000000">interface it is listening on in its outbound HTTP requests?</FONT>
<FONT COLOR="#000000">_______________________________________________</FONT>
<FONT COLOR="#000000">grlug mailing list</FONT>
<FONT COLOR="#000000"><A HREF="mailto:grlug@grlug.org">grlug@grlug.org</A></FONT>
<FONT COLOR="#000000"><A HREF="http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug">http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug</A></FONT>
</PRE>
</BLOCKQUOTE>
</BODY>
</HTML>