Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Non-transparent Squid install with IP Bypass

    Scheduled Pinned Locked Moved pfSense Packages
    3 Posts 2 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Masejoer
      last edited by

      How would I go about bypassing some subnets for squid if I have port 80 forwarded to squid through a NAT policy? I'm not using transparency so that I can get Ident data logged.There are four subnets that I need to bypass the proxy for, but the port forwarding policy that I have to push outbound port-80 traffic to Squid is also in an area where I cannot seem to get a policy to have precedence over it. I tried creating a policy from LAN to the subnets for port-80, and redirected to the same subnets, but this does not work.

      I'm just not sure how to manually do a proxy bypass. Ideas?

      1 Reply Last reply Reply Quote 0
      • D
        deltalord
        last edited by

        Have a look at /usr/local/etc/squid/squid.conf

        # Allow local network(s) on interface(s)
        acl localnet srcĀ  192.168.1.0/255.255.255.0
        

        Here you could specify which subnets should use squid and which would (hopefully) automatically bypass.

        1 Reply Last reply Reply Quote 0
        • M
          Masejoer
          last edited by

          I'll give it a try. Thanks.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.