RE: [squid-users] Squid / Pintables to forward out another interface

From: Henrik Nordstrom <[email protected]>
Date: Thu, 18 Sep 2003 08:03:20 +0200 (CEST)

On Thu, 18 Sep 2003, Ehsan Lesani wrote:

> I told you. You can use IP command or iptables command to do this one
> too. In IP command you can do source route and in iptables command it is
> too easy. But that tag in squid.conf file will do it for you, so it is
> not a good idea to use something else when squid does it itself.
> If you have a problem with its routing command then I think I can help
> you.

Note: If the machine is dual-homed with multiple connections then you need
to use policy routing to have traffic routed correctly to the correct
connection. This is not a Squid issue but a generic networking question.
The problem is that normal routing assumes there is a single path which
should be used for all packets to a given destination and does not care
what source address is used. For this you need to use the ip command to
set up your routing policy.

If you only have a single connection but want to use different IP
addresses on the same connection then no policy routing is needed.

As you say the best method to select which of your links or IP addresses
are used by Squid is to tell Squid to use a specific address. Other
approaches only makes things more messy.

Regards
Henrik
Received on Thu Sep 18 2003 - 00:03:42 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:56 MST