<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Guys,<div class=""><br class=""></div><div class="">Currently I’m trying to setup a SQUID 4.11 proxy for approx 100 users, which should be assigned to static outbound IP. The inbound IP address should not be filtered / checked. Following multiple topics and the documentation I did setup the following configuration. Yet seemingly I keep running into non-functioning of the intended configuration. Basis Idea is as followed:</div><div class=""><br class=""></div><div class="">user1 > 199.199.199.2 (outbound address)</div><div class="">user2 > 199.199.199.3</div><div class="">user3 > 199.199.199.4</div><div class="">user4 > 199.199.199.5</div><div class="">etc...</div><div class=""><br class=""></div><div class="">Hence I filled /etc/squid/userip.conf as followed:</div><div class=""><br class=""></div><div class="">###</div><div class="">199.199.199.2 user1</div><div class="">199.199.199.3 user2</div><div class="">199.199.199.4 user3</div><div class="">199.199.199.5 user4</div><div class="">###</div><div class=""><br class=""></div><div class="">With the following configuration file /etc/squid/squid.conf:</div><div class=""><br class=""></div><div class="">###</div><div class="">acl http proto http<br class="">acl port_80 port 80<br class="">acl port_443 port 443<br class="">acl CONNECT method CONNECT<br class=""><br class="">auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/passwords<br class="">auth_param basic realm Please enter username and password<br class=""><br class="">acl authenticated proxy_auth REQUIRED<br class=""><br class="">external_acl_type userip %MYADDR %LOGIN /usr/lib64/squid/ext_file_userip_acl -f /etc/squid/userip.conf<br class=""><br class="">acl userip external userip<br class=""><br class="">http_access allow userip<br class="">http_access deny all<br class=""><br class="">http_port 3128<br class="">acl ip1 myip 199.199.199.2<br class="">tcp_outgoing_address 199.199.199.2 ip1<br class=""><br class="">acl ip2 myip 199.199.199.3<br class="">tcp_outgoing_address 199.199.199.3 ip2</div><div class=""><br class=""></div><div class="">acl ip2 myip 199.199.199.4<br class="">tcp_outgoing_address 199.199.199.3 ip3</div><div class=""><br class=""></div><div class="">acl ip2 myip 199.199.199.5<br class="">tcp_outgoing_address 199.199.199.3 ip4</div><div class="">EOF</div><div class="">###</div><div class=""><br class=""></div><div class="">So far I tried both “external_acl_type userip %MYADDR” & "external_acl_type userip %SRC” yet I keep running into this error and the proxy does not to functioning:</div><div class=""><br class=""></div><div class=""><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">1636498565.031 0 xx.xxx.xxx.xxx TCP_DENIED/407 4186 CONNECT xxx:443 user1 HIER_NONE/- text/html</span></div></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Anyone knows how to solve this matter? Your input would be much appreciated!</span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Please advice, thanks!</span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Best,</span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Milan</span></div><p class='ampimg' style='display:none;visibility:none;margin:0;padding:0;line-height:0;'><img src='http://click.serveo.nl/img/jp6kat/zlPD0C7ZZZfN' alt=''></p></body></html>