Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2 WAN working with squid3

    Scheduled Pinned Locked Moved Routing and Multi WAN
    2 Posts 1 Posters 609 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      filipemotta
      last edited by

      Hi All,

      I have two links and any vlans that I separated then selecting the gateway on the LAN rule firewall.

      i.e:

      gateway
      IPv4 * 192.168.0.0/24 * * *           *      
      IPv4 * 192.168.4.0/24 * * * WAN_DSL_PPPOE

      These rules actually are using NAT to navigate on the internet, that is each vlan uses the specific link.

      My problem is that when i enabling squid + squidGuard all vlans use the default gateway. How can i solve this?

      Thanks a lot !!

      1 Reply Last reply Reply Quote 0
      • F
        filipemotta
        last edited by

        @filipemotta:

        Hi All,

        I have two links and any vlans that I separated then selecting the gateway on the LAN rule firewall.

        i.e:

        gateway
        IPv4 * 192.168.0.0/24 * * *           *      
        IPv4 * 192.168.4.0/24 * * * WAN_DSL_PPPOE

        These rules actually are using NAT to navigate on the internet, that is each vlan uses the specific link.

        My problem is that when i enabling squid + squidGuard all vlans use the default gateway. How can i solve this?

        Thanks a lot !!

        To help others professional around this solutions I found this in the pfsense document page:

        By default, traffic using a proxy such as Squid will bypass policy routing and use the default route for traffic at all times. It also bypasses expected outbound NAT and leaves via the WAN IP address directly.
        Policy routing traffic from the firewall itself is not currently possible, and as such, load balancing is not possible. Failover can be achieved in many cases by using default gateway switching under System > Advanced on the Miscellaneous tab.

        So, It is not possible. I will try to install squid external pfsense and than pass the traffic to pfsense after proxy filter.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.