<div dir="ltr"><br><div class="gmail_extra">Thanks mike. </div><div class="gmail_extra">But I think Amos is right. </div><div class="gmail_extra"><br><div class="gmail_quote">On 25 July 2015 at 00:27, Mike <span dir="ltr"><<a href="mailto:mcsnv96@afo.net" target="_blank">mcsnv96@afo.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div>I see a few issues.<br>
<br>
1. The report from the log shows a 192.168.*.* address, common LAN
IP<br></div></div></blockquote><div><br></div><div>The ip 192.168.122.1 is the ip address of virtual interface (acts as a default gateway for Virtual machines). I did NATing using iptables. </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div>
<br>
Then in the squid.conf:<br>
2. You have wvdial destination as 10.1.*.* addresses, which is a
completely different internal network.<br>
Typically there will be no internal routing or communication from
a 192.168..*.* address to/from a 10.*.*.* address without a custom
routing server with 2 network connections, one from each IP set
and to act as the DNS intermediary for routing. Otherwise for
network/internet connections, the computer/browser sees its own IP
as local network, and everything else including 10.*.*.* as an
external address out on the internet. I would suggest getting both
the browsing computer and the server on the same IP subset, as in
192.168.122.x or 10.1.4.x, otherwise these issues are likely to
continue. <br></div></div></blockquote><div><br></div><div>I have two squid servers. </div><div>1. squid 3.1 on physical server </div><div>2. squid 3.3 on VM hosted by 1</div><div><br></div><div>Same logs. No different results. </div><div><br></div><div>So when the client requests 8080 . 3.1 serves. When the client requests 3128 3.3 serves. </div><div>This application behavior is same for both. </div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div>
<br>
3. Next in the squid.conf is http_port which should be port number
only, no IP address, especially 0.0.0.0 which can cause conflicts
with squid 3.x versions. Best bet is use just port only, as in:
"http_port 3128" or in your case "http_port 8080", which is the
port (with server IP found in ifconfig) the browser will use to
connect through the squid server.<br></div></div></blockquote><div><br></div><div>I tried your suggestion. But not worked. Same results :-(</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div>
4. The bypass local network means any IP connection attempt to a
local network IP will not use the proxy. This goes back to the 2
different IP subsets. One option is to enter a proxy exception as
10.*.*.* (if the websense server is using 10.x.x.x IP address).<br></div></div></blockquote><div><br></div><div>I was thinking, what would websense have deployed. </div><div><br></div><div>@amos, mike: Can we overwrite wpad of a client using squid server or any means automatically ????? </div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div text="#000000" bgcolor="#FFFFFF"><div>
<br>
<br>
Mike</div></div></blockquote><div> </div><div>Jagannath Naidu </div></div>
</div></div>