• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Upstream Squid Proxy via IPSEC

Scheduled Pinned Locked Moved IPsec
2 Posts 1 Posters 3.2k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • X
    xibalba
    last edited by Oct 21, 2006, 4:27 AM Oct 21, 2006, 12:46 AM

    Hello everyone,

    I currently have 2 machines running pfSense 1.0 RELEASE with IPSEC enabled between the two networks.
    Network A: 192.168.0.0/24
    Network B: 192.168.1.0/24

    I have the squid package installed on the router of Network B. Now I would like to do transparent http proxying and pass the data to the http filtering daemon on Network A (192.168.0.12). I added a static route to Network A on the router of Network B (route add 192.168.0.0/24 192.168.1.1).

    on the router of Network B I also setup a transparent squid proxy server with the upstream server set as 192.168.0.12 (Network A) port 8080. With logging enabled I see the http requests passing through the router of Network B however I do not see them being forwarded to the daemon on 192.168.0.12 port 8080.

    When I disabled transparent proxy filtering and set my browers proxy ip to 192.168.0.12 port 8080 I am able to access the proxy just fine.
    Any thoughts on where squid is going wrong?

    1 Reply Last reply Reply Quote 0
    • X
      xibalba
      last edited by Oct 21, 2006, 7:25 PM

      I was able to work around this by creating a port forward nat rule on the lan interface with the ip as ANY with the external port as http and internal ip/port as 192.168.0.12:8080
      then i disabled the local squid proxy.

      1 Reply Last reply Reply Quote 0
      1 out of 2
      • First post
        1/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received