Re: [squid-users] multihomed vpn

From: Chris Robertson <[email protected]>
Date: Mon, 01 Oct 2007 15:44:06 -0800

pedro noticioso wrote:
> Hi there
>
> I am using squid 2.6.STABLE5 that comes in debian etch
>
> We just installed a VPN and noticed a slow speed, so just added a second adsl connection straight to the lans swith and added it to the clients gateway configuration.
>

You've done the hard part...
> I want to redirect the vpn servers http traffic to that new router and keep the first adsl connection just for the vpn.
>
> squid is running on the vpn server currently, and I have this to redirect 80 to 3128 for transparent squid
>
> iptables -t nat -A PREROUTING -i eth1 -s 192.168.2.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128
>
> It works, but the problem is that, squid itself is going into the vpn and through the first adsl connection for the internet, and not to the second adsl connection.
>
> looking at squid.conf I tried
>
> dns_nameservers 192.168.2.254 # ip for the second adsl router
>
> but squid is just getting dns from there, but all http traffic is still going in from the first router sharing traffic with the vpn
>

See
http://www.squid-cache.org/Versions/v2/2.6/cfgman/tcp_outgoing_address.html

Chris
Received on Mon Oct 01 2007 - 17:44:13 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Nov 01 2007 - 13:00:00 MDT