Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem with multiWAN and Squid proxy

    Scheduled Pinned Locked Moved Routing and Multi WAN
    2 Posts 2 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tsjavaloyes
      last edited by

      Hi,

      I'm a newcomer in pfSense.

      In first place sorry for my 'ugly' English.

      I have a new pfSense 1.2.3-rc3 installation in a Core2Duo, 1GB, 5 ethernet cards box. It will be a corporate firewall. Only extra packages installed are:

      • rate

      • squid

      • squidGuard

      We have 2 WAN's (ADSL router) conected  to ethernet 1 and 2:

      | INTERNET |                                                                                    |  pfSense box |
            |–-------- ADSL router 1 --- 192.168.1.254 ------------ 192.168.1.250 ---|  |  |
            |---------- ADSL router 2 --- 192.168.2.254 ------------ 192.168.2.250 ---|  |  |
                                                                                                                          |
                                                                  LAN ------------ 192.168.3.1 ---------

      Reading others posts I disable the "sticky connections" in System|Advanced because it's broke.
      We create a OpenDNS account to have DNS for monitoring the pools in Load Balancer:

      LoadBalance  --- gateway (balance)  - wan/opt1 ---- Monitor: 208.67.xxx.xxx/208.67.yyy.yyy
      WANfailover  --- gateway (failover)  - wan/opt1  ---- Monitor: 208.67.xxx.xxx/208.67.yyy.yyy
      WAN2failover  --- gateway (failover)  - opt1/wan ---- Monitor: 208.67.yyyy.yyyy/208.67.xxx.xxx

      when opt1 is the WAN2 conection...

      Also I create 3 rules in Firewall Lan:

      Proto              Source      Port        Destination              Port        Gateway
        *                Lan net        *    192.168.1.0/24 (WAN1)      *      192.168.1.254 (Lan -> WAN)
        *                Lan net        *            WAN2 net                *      192.168.2.254 (Lan -> WAN2)
        *                Lan net        *                  *                      *      LoadBalance (see pool Load Balance)

      When we simule a failover on WAN1 (disconnecting ethernet cable) we lost Internet connection but doing a "traceroute" the connection it's alive using WAN2!

      Anybody can say me where I'm wrong?

      Thanks

      1 Reply Last reply Reply Quote 0
      • A
        acidrop
        last edited by

        Hi

        I think the problem is tha Squid currently supports only 1 gateway (WAN1).
        Disable squid transparent mode.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.