Profiles & Network settings

The Profiles Feature of SafeSquid is a very powerful mechanism of defining, enabling and disabling groups of related entries in other features.

Profiles & Network settings

Postby Laurent#IMS » Tue Mar 21, 2006 9:01 pm

Hi,

I test Safesquid Free Edition before buy it !!...I want to use proxy server for all my clients, but I shape the traffic client. Although, I need to redirect one client by one interface.

Example :
3 clients A,B,C use safesquid proxy on 192.168.1.1
I want that the client A have a 192.168.1.2 IP after it passed proxy. And 192.168.1.3 for client B, and 192.168.1.4 for C client.

On my machine, the 4 IP are declared correctly.

How make this config with Safesquid ? With Squid, i used the tcp_outgoing field...
Laurent#IMS
 
Posts: 296
Joined: Wed Jun 29, 2005 8:59 pm
Location: Castres

Re: Profiles & Network settings

Postby Tech Support One » Wed Mar 22, 2006 10:26 am

Hello

You can make use of config -->Network settings --> interface add option in safesquid to achieve this

I.e create profiles from config--> acces restritions-->
for these differnt IP addresses and

use the profiles created from access restrictions ni
config--> Netowrk Settings ---> to bind differt IP address for outgoing requests to diffener profiles FOe example like
config--> Netowrk Settings --->nterface add

Enabled true
Comment USer-A bind ti interfaceA
profile UserA
IP IP address of interface A

and so on

If you are still facing problems upload the config.xml you are uisng
Tech Support One
 
Posts: 1458
Joined: Sat Aug 21, 2004 4:43 pm
Location: India

Re: Profiles & Network settings

Postby Laurent#IMS » Wed Mar 22, 2006 1:43 pm

It doesn't work...

This is my config test :

213.190.80.208 : IP of safesquid, gateway of my clients to go out.

Client A : IP : 213.190.80.27 must go out with IP 213.190.80.209
Client B : IP : 213.190.80.30 must go out with IP 213.190.80.210
Laurent#IMS
 
Posts: 296
Joined: Wed Jun 29, 2005 8:59 pm
Location: Castres

Re: Profiles & Network settings

Postby Tech Support One » Wed Mar 22, 2006 4:03 pm

Hi
Could you explain what exaclty you are trying to do when you say
You want to have client 213.190.80.27 who has set safesquid as proxy to go out with IP 213.190.80.209

Supposing the client with IP address 213.190.80.27 has set the proxy as
213.190.80.208:8080 in his browser and makes an requet what would you expect .?

Have you tried with rules like

Config---> Access Restrictions

Enabled true
Comment Client A--- machine
IP Address 213.190.80.27
PAM authentication false
Access config,proxy,http,transparent,connect,bypass,urlcommand
Added profiles ClientA

Enabled true
Comment Client B -- machine
IP Address 213.190.80.30
PAM authentication false
Access config,proxy,http,transparent,connect,bypass,urlcommand
Added profiles ClientB

and Config--> Network Settings ---> Interface ADD

Enabled true
Comment Make an Outgoing connection with
profile ClientA
IP 213.190.80.209


Enabled true
Comment Make an Outgoing connection with
profile ClientB
IP 213.190.80.210

Also let us know what logs do you get in safesquid logs

set the safesquid log to maximum in safesquid init script
edit
vi /etc/init.d/safesquid
set
LOGLEVEL=67108863

and restart safesquid service
and check for
tail -f /opt/safesquid/logs/safesquid.log | grep "network"
and let us know what is the log you get
Tech Support One
 
Posts: 1458
Joined: Sat Aug 21, 2004 4:43 pm
Location: India

Re: Profiles & Network settings

Postby Laurent#IMS » Wed Mar 22, 2006 4:43 pm

Re,

I want that my clients use the same proxy : 213.190.80.208 8080
Client A arrive with 213.190.80.27 IP
Client B arrive with 213.190.80.30 IP

Next I want that client A passed safesquid and sort on internet with IP 213.190.80.209, and client B sort with 213.190.80.210 IP. I want implement the tcp_outgoing function of squid on safesquid. I hope it's understood...!!


And my config doesn't work. Network logs :
tail -f /var/safesquid/logs/safesquid.log | grep network
Wed 22 11:56:15 [1] network: allowed connect from 213.190.80.27 on port 8080
Wed 22 11:56:17 [2] network: allowed connect from 213.190.80.27 on port 8080
Wed 22 11:56:17 [3] network: allowed connect from 213.190.80.27 on port 8080
Wed 22 11:56:35 [3] network: 213.190.80.27 disconnected after making 1 requests
Wed 22 11:56:35 [1] network: 213.190.80.27 disconnected after making 1 requests
Wed 22 11:57:07 [4] network: allowed connect from 213.190.80.27 on port 8080
Wed 22 11:57:07 [5] network: allowed connect from 213.190.80.27 on port 8080
Wed 22 11:57:07 [2] network: 213.190.80.27 disconnected after making 5 requests
Wed 22 11:57:07 [4] network: 213.190.80.27 disconnected after making 1 requests
Wed 22 11:57:07 [6] network: allowed connect from 213.190.80.27 on port 8080
Wed 22 11:57:07 [6] network: response exceeds maximum download buffer size
Wed 22 11:57:07 [6] network: 213.190.80.27 disconnected after making 1 requests
Wed 22 11:57:27 [5] network: response exceeds maximum download buffer size
Wed 22 11:57:31 [7] network: allowed connect from 213.190.80.30 on port 8080
Wed 22 11:57:32 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:32 [8] network: allowed connect from 213.190.80.30 on port 8080
Wed 22 11:57:32 [9] network: allowed connect from 213.190.80.30 on port 8080
Wed 22 11:57:32 [8] network: response exceeds maximum download buffer size
Wed 22 11:57:32 [10] network: allowed connect from 213.190.80.30 on port 8080
Wed 22 11:57:34 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:34 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:34 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [8] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [8] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:35 [8] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [8] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [10] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [8] network: response exceeds maximum download buffer size
Wed 22 11:57:36 [7] network: response exceeds maximum download buffer size
Wed 22 11:57:39 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:41 [9] network: response exceeds maximum download buffer size
Wed 22 11:57:42 [10] network: 213.190.80.30 disconnected after making 11 requests


And when I go to Internet, Client A & client B have 213.190.80.208 address.
Laurent#IMS
 
Posts: 296
Joined: Wed Jun 29, 2005 8:59 pm
Location: Castres

Re: Profiles & Network settings

Postby Tech Support One » Wed Mar 22, 2006 7:15 pm

In the logs there seems no entry for bind requests
at least it should have shown logs like
Wed 22 11:01:04 [10284] network: failed to bind on xx.xx.xx.xx for outgoing connection
Wed 22 11:01:04 [10284] network: binding outgoing connection to xx.xx.xx.xx
Do you see logs with "bind" entries ..
and when it is succesful it will only show
Wed 22 11:01:04 [10284] network: binding outgoing connection to xx.xx.xx.xx
To me it seems that entries in config--> network settings--interface add entry are still not enabled...
Would you please upload the config.xml witht rules that you are using..?

It would help if you can send the config.xml with the rules as stated in above example

Are you able to make outgoing requets with other interface without any profiles in the onfig--> network settings--interface add
for example If I add a virutal inteface eth0:0 with different address on the safesquid machine eg yy.yy.yy.yy and specify this yy.yy.yy.yy the same in safesquid's config--> network settings--interface add section is it binding to it ?
Let us kknow the same
Tech Support One
 
Posts: 1458
Joined: Sat Aug 21, 2004 4:43 pm
Location: India

Re: Profiles & Network settings

Postby Laurent#IMS » Wed Mar 22, 2006 7:54 pm

I haven't bind entries in the logs.

Here my config.xml

for example If I add a virutal inteface eth0:0 with different address on the safesquid machine eg yy.yy.yy.yy and specify this yy.yy.yy.yy the same in safesquid's config--> network settings--interface add section is it binding to it ?

On my server, I have an interface eth0 with 213.190.80.208 IP. The others interface are virtual interfaces : eth0:1 : 213.190.80.209....
Laurent#IMS
 
Posts: 296
Joined: Wed Jun 29, 2005 8:59 pm
Location: Castres

Re: Profiles & Network settings

Postby Tech Support One » Thu Mar 23, 2006 10:23 am

Hi
Please
Use the config.xml that has been attached below and let me know the status;

With this atleaset you will get logs indicating network bind status
Tech Support One
 
Posts: 1458
Joined: Sat Aug 21, 2004 4:43 pm
Location: India

Re: Profiles & Network settings

Postby Laurent#IMS » Thu Mar 23, 2006 1:50 pm

Hi,

It's OK. It was the added profiles field !!

Furthermore, I had 2 installations of safesquid on the same machine and I don't look the correct config.xml :oops:
Laurent#IMS
 
Posts: 296
Joined: Wed Jun 29, 2005 8:59 pm
Location: Castres

Re: Profiles & Network settings

Postby ramkee » Mon Feb 16, 2015 7:05 pm

Hello Laurent,

We have released latest version SafeSquid SWG for Linux & windows with extraordinary features & enhancements. New sections are introduced those can work with "https" with cool inteface! To get more info please have a look here
ramkee
Site Admin
 
Posts: 86
Joined: Fri Jan 02, 2015 5:23 pm


Return to Profiles

Who is online

Users browsing this forum: No registered users and 1 guest

cron