[squid-users] squid "internal?" loop - with no firewall nat going on..?

Klavs Klavsen kl at vsen.dk
Thu Mar 12 11:15:17 UTC 2015


Amos Jeffries wrote on 03/12/2015 11:59 AM:
> If your intention here is to get around a broken firewall devices port
> 80/443 inspection then I expect you require two proxies anyway. The
> traffic has to be on a different port entirely which is not being
> mangled by the firewall.
>
I've gotten an OK - for them to not inspect traffic coming from the 
squid server - as long as I verify it's setup is secure and only allows 
traffic for webservers to certain urls. (it's not me they don't trust - 
it's the websites running on those servers :)

As far as I understand the routing example - it only works when I've 
setup a router (that bypasses the normal gateway, and acts as a router), 
or a setup where squid is on the same box.

What setup should I use to route packages from clients (when I want to 
capture/redirect on clients) to squid server on same LAN ?

the routing example didn't seem to work :(

-- 
Regards,
Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk - Tlf. 61281200

"Those who do not understand Unix are condemned to reinvent it, poorly."
   --Henry Spencer



More information about the squid-users mailing list