I'm using the fallowing segment of configuration in our "squid.conf" to archive some spreading across several IP's to minimize some limitations imposed by some sites by IP address (traffic, simultaneous access, etc)
acl outaddr1 src 0.0.0.0/0.0.0.3 acl outaddr2 src 0.0.0.1/0.0.0.3 acl outaddr3 src 0.0.0.2/0.0.0.3 acl outaddr4 src 0.0.0.3/0.0.0.3 tcp_outgoing_address 193.137.237.76 outaddr1 tcp_outgoing_address 193.137.237.77 outaddr2 tcp_outgoing_address 193.137.237.78 outaddr3 tcp_outgoing_address 193.137.237.79 outaddr4 tcp_outgoing_address 193.137.237.3 all The problem is this configuration broke the IP based authentication of some sites because for some reason unknown to me sometimes consecutive accesses from the same internal IP gets different addresses in the access from the proxy to the site ... I'm I doing something wrong ? Is this a squid "bug" ? (Using squid2.5stable4 under Linux 2.4.22) ------------------ ngrep "dump" of a broken access -------------------- T 193.137.237.78:57432 -> 193.126.240.145:80 [AP] POST /login.msc HTTP/1.0..Accept: */*..Referer: http://www.iol.pt/..Accept-Language: pt..Conte nt-Type: application/x-www-form-urlencoded..User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win dows NT 5.1; .NET CLR 1.1.4322)..Host: webmail.iol.pt..Content-Length: 35..Pragma: no-cache..V ia: 1.0 proxy2.net.ipl.pt:3128 (squid/2.5.STABLE4-20031012)..X-Forwarded-For: 10.79.17.50..Cac he-Control: max-age=216000..Connection: keep-alive.... T 193.137.237.77:56888 -> 193.126.240.145:80 [AP] GET /pt/mail.html?sid=xxxxxxx+c&lang=pt&cert=false HTTP/1.0..Accept: */*..Referer: http://ww w.iol.pt/..Accept-Language: pt..User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)..Host: webmail.iol.pt..Pragma: no-cache..Via: 1.0 proxy2.net.ipl.pt:3128 ( squid/2.5.STABLE4-20031012)..X-Forwarded-For: 10.79.17.50..Cache-Control: max-age=216000..Conn ection: keep-alive.... -- Best regards, []-------------------------------------------------------------[] Pedro Ribeiro Online: http://www.isel.ipl.pt/~pribeiro/ IRC(PTnet) Nick: PAntMaR e-Mail: Spamm: [EMAIL PROTECTED] Personal: [EMAIL PROTECTED] IPLNet/ISELNet Admin: [EMAIL PROTECTED] Tel: Internal Ext.1610 Tel: +351-218317032 / Fax: +351-218317191 []-------------------------------------------------------------[]
