To keep Tinyproxy's client listener local while selecting a local source for outgoing connections:

Listen 127.0.0.1
Bind 192.0.2.30

Replace 192.0.2.30 with an address assigned to the proxy host. Listen controls where clients connect; Bind selects the local address used for outgoing connections. The fragment retains local-only access and is not a complete authentication or client access policy.

Binding does not create an interface or select a gateway. On a multihomed host, inspect routing for that source, provider acceptance and the return path. A tunnel or secondary provider can require routing policy outside Tinyproxy.

BindSame is a separate model that relates outgoing selection to the incoming address. Choose it only when that relationship is intended, rather than as a general repair for an unexplained exit mismatch.

The website may still see a different address. NAT can translate the local source; an upstream proxy can make the final connection from its own exit. Keep the listener, outgoing local address, gateway and final public identity recorded separately.

Erthyglow kevrennek