<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">Never mind, we found a different solution.</div><div class=""><br class=""></div><div class="">Cheers,</div><div class=""><br class=""></div><div class="">Milan <br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 11 Nov 2021, at 12:11, Milan <<a href="mailto:milan@serveo.nl" class="">milan@serveo.nl</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Guys,<div class=""><br class=""></div><div class="">Currently I’m trying to setup a SQUID 4.11 proxy for approx 100 users, which should be assigned to static outbound IP. The inbound IP address should not be filtered / checked. Following multiple topics and the documentation I did setup the following configuration. Yet seemingly I keep running into non-functioning of the intended configuration. Basis Idea is as followed:</div><div class=""><br class=""></div><div class="">user1 > 199.199.199.2 (outbound address)</div><div class="">user2 > 199.199.199.3</div><div class="">user3 > 199.199.199.4</div><div class="">user4 > 199.199.199.5</div><div class="">etc...</div><div class=""><br class=""></div><div class="">Hence I filled /etc/squid/userip.conf as followed:</div><div class=""><br class=""></div><div class="">###</div><div class="">199.199.199.2 user1</div><div class="">199.199.199.3 user2</div><div class="">199.199.199.4 user3</div><div class="">199.199.199.5 user4</div><div class="">###</div><div class=""><br class=""></div><div class="">With the following configuration file /etc/squid/squid.conf:</div><div class=""><br class=""></div><div class="">###</div><div class="">acl http proto http<br class="">acl port_80 port 80<br class="">acl port_443 port 443<br class="">acl CONNECT method CONNECT<br class=""><br class="">auth_param basic program /usr/lib64/squid/basic_ncsa_auth /etc/squid/passwords<br class="">auth_param basic realm Please enter username and password<br class=""><br class="">acl authenticated proxy_auth REQUIRED<br class=""><br class="">external_acl_type userip %MYADDR %LOGIN /usr/lib64/squid/ext_file_userip_acl -f /etc/squid/userip.conf<br class=""><br class="">acl userip external userip<br class=""><br class="">http_access allow userip<br class="">http_access deny all<br class=""><br class="">http_port 3128<br class="">acl ip1 myip 199.199.199.2<br class="">tcp_outgoing_address 199.199.199.2 ip1<br class=""><br class="">acl ip2 myip 199.199.199.3<br class="">tcp_outgoing_address 199.199.199.3 ip2</div><div class=""><br class=""></div><div class="">acl ip2 myip 199.199.199.4<br class="">tcp_outgoing_address 199.199.199.3 ip3</div><div class=""><br class=""></div><div class="">acl ip2 myip 199.199.199.5<br class="">tcp_outgoing_address 199.199.199.3 ip4</div><div class="">EOF</div><div class="">###</div><div class=""><br class=""></div><div class="">So far I tried both “external_acl_type userip %MYADDR” & "external_acl_type userip %SRC” yet I keep running into this error and the proxy does not to functioning:</div><div class=""><br class=""></div><div class=""><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">1636498565.031 0 xx.xxx.xxx.xxx TCP_DENIED/407 4186 CONNECT xxx:443 user1 HIER_NONE/- text/html</span></div></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Anyone knows how to solve this matter? Your input would be much appreciated!</span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Please advice, thanks!</span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Best,</span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Milan</span></div><div style="display: none; margin: 0px; padding: 0px; line-height: 0;" class=""><img src="http://click.serveo.nl/img/jp6kat/zlPD0C7ZZZfN" alt="" class=""></div></div>_______________________________________________<br class="">squid-users mailing list<br class=""><a href="mailto:squid-users@lists.squid-cache.org" class="">squid-users@lists.squid-cache.org</a><br class="">http://lists.squid-cache.org/listinfo/squid-users<br class=""></div></blockquote></div><br class=""></div><p class='ampimg' style='display:none;visibility:none;margin:0;padding:0;line-height:0;'><img src='http://click.serveo.nl/img/jp6kat/V6ghFTFq15rY' alt=''></p></body></html>