Squid Proxy. Forward IP of computer and not proxy?

[dany2010]

Hi,

 

Ive setup squid proxy in a Ubuntu virtual machine and websites are accessible.

 

The problem we have is that the squid proxy isnt passing on the ip address of the client machine.

 

This causes issues with filtering as the LEA gives us two IP address ranges. One for the pupil filter and the other for staff.

 

Is it possible to forward the clients IP address rather than the proxy server address? I've read about x-forwarded but cant get my head round it.

 

The other issue is that the virtual host, virtual adapter, and virtual machine are all on the staff range but the filter still seems to be set on the pupil filter on the other range. Is there another ip address that you can think of? Firefox inside the Virtual uses the staff filter which is the weird thing.

 

Thanks

Edited October 26, 2012 by dany2010

[Duke5A]

That's great that you got it working; now comes the fun part of tweaking it!

 

As far as version 3.0 is concerned, it is Squid's default behavior to pass on the internal client's address onto the cache peer (upstream proxy) unless it is explicitly disabled. Does your LEA give you one proxy only and traffic filtered differently based on originating address?

 

Wait a sec, you're running Dans Guardian right? If so, Dan's gets the request first, passes it to Squid, and Squid in turn passes it to the LEA proxy. Unless Dan's is also setup for x-forwarding then the LEA is only seeing the IP address of your proxy as the origination for the request.

 

Try dropping these lines in your Dans config file.

 

forwardedfor = on
usexforwardedfor = on

 

You may have to read up on it a bit more since I don't use DG, but if you are this is most likely the cause of your x-forwarding issue.

[dany2010]

Brill, thanks.

 

Will give it a go Monday.

 

Yeah we have the one proxy and it depends on the range of the computer as to which filter you get.

 

Just reading about how to that with dansguardian here

group_configuration | DansGuardian Documentation Wiki

[dany2010]

Perfect.

 

Problem solved.

 

Thanks again