1

I want to set up a squid proxy to use ipv6 only for outgoing traffic. I want the ip4 address to be totally invisible to the service I connecting to. I don't care about fallback and lack of ipv6 support, the service I connecting to, fully support ipv6 only. With my setup, the IPv4 and internal IP is visible. What I missing?

Thanks

Heres my squid.conf:

http_access allow localhost manager
http_access deny manager
http_access allow localhost
http_port 3128
http_port 3129
coredump_dir /var/spool/squid

http_access allow all
acl to_ipv4 dst ipv4
http_access deny to_ipv4

acl user1 myportname 3128
acl user2 myportname 3129

tcp_outgoing_address x:x:x:x::1 user1
tcp_outgoing_address x:x:x:x::2 user2

forwarded_for delete
via off
follow_x_forwarded_for deny all
request_header_access X-Forwarded-For deny all
request_header_access From deny all
request_header_access Referer deny all
request_header_access User-Agent deny all
request_header_access Authorization allow all
request_header_access Proxy-Authorization allow all
request_header_access Cache-Control allow all
request_header_access Content-Length allow all
request_header_access Content-Type allow all
request_header_access Date allow all
request_header_access Host allow all
request_header_access If-Modified-Since allow all
request_header_access Pragma allow all
request_header_access Accept allow all
request_header_access Accept-Charset allow all
request_header_access Accept-Encoding allow all
request_header_access Accept-Language allow all
request_header_access Connection allow all
request_header_access All deny all
0

I had the same issue and this resolved it for me:

Add this to your squid.conf file:

forwarded_for off

This will exclude the forwarding of the system's (ipv4) IP address.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.