Re: [squid-users] Internet facing proxy

cabletastic wrote:
> Greetings,
> I have a setup I am close (but no cigar) to getting working. I would like an
> Active Directory authenticated inbound proxy to pass authenticated requests
> to our anti-virus subscription server internally. My setup 'works' to this
> degree - I can connect to the proxy on the port I designated at
> avtest.domain.com, it then prompts me for AD credentials and this works all
> fine. However when it then goes to avupdate.domain.com it goes back out on
> to the internet and loops back into the firewall to get to the address
> (proxy and update server are obviously on same network....) despite the
> proxy having an internal link and internal DNS to the update server. So -
> what I actually want is that I connect over the net to the proxy,
> authenticate with AD credentials and the server then acts as a true inbound
> proxy and takes me to the internal address of the avupdate.domain.com server
> instead of looping back out to get to it over an internet connection. I
> could of course cheat and modify my firewall rule to only allow traffic from
> said proxy's external address but I would really rather do this the correct
> way.
> Hope this makes sense as it does seem somewhat rambling!
> Cheers
> Si
>

Please read the documentation on correctly configuring "Reverse Proxy"
at http://wiki.squid-cache.org/SquidFaq/ReverseProxy
under "How do I set it up?"

With correctly configured cache_peer lines, DNS never becomes involved
and all requests go to the pre-configured internal servers just fine.

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10
   Current Beta Squid 3.1.0.2 or 3.0.STABLE11-RC1