Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Policy based routing ignored by Squid (Solved)

    Routing and Multi WAN
    1
    2
    679
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      coffeecup
      last edited by

      Hello people,

      I am not totally sure if i have posted in the correct forum, i do not know the exact cause so not sure where to put it(it could be the package, or the routing or something else).

      I am using pfsense 2.4.2-RELEASE-p1 (amd64) on a device with 5 physical network interfaces (4 lan and 1 wifi).
      ethernet 1 - used for emergency connections to the box –> 192.168.1.1
      ethernet 2 - VLAN 100 and 300
      ethernet 3-  VLAN 700
      ethernet 4 - WAN

      VLAN100 10.10.10.0/24 pfsense ip/gateway = 10.10.10.1 / DHCP scope 10.10.10.100 - 10.10.10.200
      VLAN300 10.10.30.0/24 pfsense ip/gateway = 10.10.30.1 / DHCP scope 10.10.30.100 - 10.10.30.200
      VLAN300 10.10.70.0/24 pfsense ip/gateway = 10.10.70.1 / DHCP scope 10.10.70.100 - 10.10.70.200

      i have configured and Squid(with Squidgaurd )proxy, with listening interface 10.10.70.1

      I have made a succesfull VPN connection, and mapped it to an host on VLAN 300 (10.10.30.201) (specifed gateway)
      This works, the traffic for the machine goes through the VPN, while traffic from other hosts goes through the WAN(aka default gw)
      I have used this tutorial to accomplish this:
      https://pixelsandwidgets.com/2014/10/setup-pfsense-openvpn-client-specific-devices/

      When i access my squid proxy from the 10.10.70.0/24 network my traffic is redirected through the VPN
      When i disable the proxy on my client my traffic is going through the wan.

      I would like to have the proxy not use the VPN as gateway but my regular WAN, please advice.

      Thanks you in advance

      1 Reply Last reply Reply Quote 0
      • C
        coffeecup
        last edited by

        Too answer my own question in case someone else has this problem:

        My VPN provider pushed the route for the default gateway. This was visible in the routes section.

        I used this article to change the VPN connection
        https://community.openvpn.net/openvpn/wiki/IgnoreRedirectGateway

        This made my pfsense works as expected (including the Squid)

        Thanks

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.