[privoxy-devel] [ ijbswa-Feature Requests-1890896 ] Allow configurable outgoing IP address

[SourceForge.net <no...@so...>]

Feature Requests item #1890896, was opened at 2008-02-11 04:57
Message generated for change (Comment added) made by freddy436
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=1890896&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Configuration
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Allow configurable outgoing IP address

Initial Comment:
I have a multi-homed machine with several publicly reachable IP addresses, I would like all outgoing privoxy traffic to go through a specific address.

This is similar to the Squid tcp_outgoing_address configuration parameter, though I personally do not need the ACL configurability:

http://www.squid-cache.org/Versions/v2/2.6/cfgman/tcp_outgoing_address.html

----------------------------------------------------------------------

Comment By: Freddy (freddy436)
Date: 2008-03-22 08:34

Message:
Logged In: YES 
user_id=1977483
Originator: NO

On Linux machines this can be done with the advanced routing stuff

MARK_ISP1=1

iptables -A OUTPUT -t mangle -p tcp --dport 80 -j MARK --set-mark
$MARK_ISP1
iptables -A OUTPUT -t mangle -p tcp --dport 443 -j MARK --set-mark
$MARK_ISP1
# (you might want to do filtering by process here)

ip route flush table ISP1
ip route add $NET_LAN dev $IF_LAN src $IP_LAN table ISP1
# additional routes here 
ip route add default via $ISP1_GATEWAY table ISP1

ip rule add from $IP_WAN_ISP1 table ISP1
ip rule add fwmark $MARK_ISP1 table ISP1


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=1890896&group_id=11118