Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiwan and squid no work properly

    Scheduled Pinned Locked Moved Routing and Multi WAN
    19 Posts 6 Posters 4.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      aykiri1
      last edited by

      i fixed it.

      create an acl with src and add ip list any text file (every ip per line) then set acl to wan/2 or wan/1 which you want
      add this acl to first line. that other acl's work all default gateway.
      regards

      1 Reply Last reply Reply Quote 0
      • B
        basitkhan
        last edited by

        @aykiri1:

        i fixed it.

        create an acl with src and add ip list any text file (every ip per line) then set acl to wan/2 or wan/1 which you want
        add this acl to first line. that other acl's work all default gateway.
        regards

        i used  pfsense 2.0.3 and share your config or screen shots for better understanding, i m still struck in it :(
        waiting…

        1 Reply Last reply Reply Quote 0
        • A
          aykiri1
          last edited by

          my version 2.1 64 bit
          goto proxy server screen
          and see custom options.

          default is :

          tcp_outgoing_address 127.0.0.1;;redirect_program /usr/pbi/squidguard-amd64/bin/squidGuard -c /usr/pbi/squidguard-amd64/etc/squidGuard/squidGuard.conf;redirector_bypass off;url_rewrite_children 5

          then add this string as your config

          acl nameofacl src "/usr/local/etc/squid/ip.txt";tcp_outgoing_address X.X.X.X nameofacl;

          nameofacl is what you will write of name its not important you can use any
          X.X.X.X is your wan interface (not gateway)

          "/usr/local/etc/squid/ip.txt" is ip list which you want to ip's going to which interface.
          open any txt file. then write per line 1 ip

          example:
          192.168.1.40
          192.168.1.41
          192.168.1.42
          etc…

          no use /24 or /16 /8 for subnet

          no need any floating rule .. its working perfect with squid 2.1 and squidguard
          i think moderators change thread name to (fixed)

          1 Reply Last reply Reply Quote 0
          • H
            hyrol
            last edited by

            @aykiri1:

            then add this string as your config

            acl nameofacl src "/usr/local/etc/squid/ip.txt";tcp_outgoing_address X.X.X.X nameofacl;

            nameofacl is what you will write of name its not important you can use any
            X.X.X.X is your wan interface (not gateway)

            what happen when WAN PPPoE dynamic "tcp_outgoing_address X.X.X.X nameofacl"

            for me it's not roundrobin/loadbalacing

            1 Reply Last reply Reply Quote 0
            • J
              javerleo
              last edited by

              @aykiri1:

              my version 2.1 64 bit
              goto proxy server screen
              and see custom options.

              default is :

              tcp_outgoing_address 127.0.0.1;;redirect_program /usr/pbi/squidguard-amd64/bin/squidGuard -c /usr/pbi/squidguard-amd64/etc/squidGuard/squidGuard.conf;redirector_bypass off;url_rewrite_children 5

              then add this string as your config

              acl nameofacl src "/usr/local/etc/squid/ip.txt";tcp_outgoing_address X.X.X.X nameofacl;

              nameofacl is what you will write of name its not important you can use any
              X.X.X.X is your wan interface (not gateway)

              "/usr/local/etc/squid/ip.txt" is ip list which you want to ip's going to which interface.
              open any txt file. then write per line 1 ip

              example:
              192.168.1.40
              192.168.1.41
              192.168.1.42
              etc…

              no use /24 or /16 /8 for subnet

              no need any floating rule .. its working perfect with squid 2.1 and squidguard
              i think moderators change thread name to (fixed)

              A good contribution. But even if it works, it is not the same functionality we had before pfSense 2.1: Squid Outgoing connections balanced automatically between  WAN interfaces.

              This is an important topic. Maybe the hero members can contribute with a final post: Can we have Squid working with multi WAN on 2.1? What are the required steps?

              :)

              Thanks.

              –-----------
              God is my best friend

              1 Reply Last reply Reply Quote 0
              • B
                basitkhan
                last edited by

                Still Waiting to work squid proxy with 2.1 :(
                the per ip list is fine but what to do if one wan connection goes down? it will still keep sending the request to failed wan :(
                this is major bug! kindly update it as soon as possible

                Thanks for all

                1 Reply Last reply Reply Quote 0
                • A
                  afrugone
                  last edited by

                  Any news about fixing PfSense 2.1 to work with Multiwan+Squid, I'll need it and don't like to downgrade to 2.03.

                  Thanks for your comments

                  1 Reply Last reply Reply Quote 0
                  • K
                    Kababayan
                    last edited by

                    Have 3 wans two wans uses load balance for proxy. third wan is for gaming and other traffic. Using pfsense 2.1 upgraded from 2.0.3. Using Lusca Proxy.

                    1 Reply Last reply Reply Quote 0
                    • J
                      javerleo
                      last edited by

                      So far I was forced to downgrade to 2.0.3 to have squid working with multi-wan but I don't like the idea of losing the new 2.1 functionality.

                      Hero members: come and save us !!! (as usually they do)

                      :)

                      –-----------
                      God is my best friend

                      1 Reply Last reply Reply Quote 0
                      • H
                        hyrol
                        last edited by

                        I was get a solution, please follow the forum link below.

                        https://forum.pfsense.org/index.php/topic,66822.0.html
                        or
                        https://forum.pfsense.org/index.php/topic,60977.0.html

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.