[squid-users] Squid - Not replace source IP address

Hi,

We have several interconnected branches on their own networks. I would like
to shut off web access directly from all branches except head office.

We have an Untangle gateway configured as a transparent bridge at head
office that all traffic passes through. I would like to keep on using this
for content filtering and logging. However I want a Squid server to be able
to accept connections from our branches, use its caching and then redirect
it out through the Untangle gateway for loggin. We will be redirecting all
web traffic on our Cisco routers at each branch to the proxy server.

I have Squid set up to allow connections from all our internal networks and
set up IPtables with the following command:

ptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port
3128

This all works fine and I am able to surf throguh the proxy, which appears
to be caching correctly and forwarding it to our gateway which performs the
content filtering and logging. The only problem is that through the NAT
process the source IP address is replaced with that of the Squid's and is
logged accordingly.

How would I go about configuring Squid to accept connections, cache them and
then forward the request on to the webserver via the gateway WITHOUT
replacing the source IP address?

In summary: user requests connection to website on port 80, request
transparently redirected to Squid on Cisco router, Squid accepts it and
forwards it to webserver through gateway.

Cheers

-- 
View this message in context: http://www.nabble.com/Squid---Not-replace-source-IP-address-tp24818364p24818364.html
Sent from the Squid - Users mailing list archive at Nabble.com.