Re: [squid-users] Help! one more time on on Squid3.HEAD(20110307), TPROXY4 and Iptables 1.4.9 + ebtables

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Thu, 17 Mar 2011 00:25:34 +1300

On 16/03/11 22:03, Jim Binder wrote:
> Amos,
>
> Back at it again tonight -- So, when you did this (and I'm assuming you have -- maybe incorrectly ); ) how many nics did you have enabled.
>

I've only had login with one client machine briefly that was doing it.
Worked perfectly. The rest, including coding has been completely done on
theory with others doing the hands-on tests. Sorry :(

The easy setups have 2 NICs to keep the client->Squid and
Squid->Internet packets physically separated. The netfilter guys came up
with some MAC-based rules that can work for one NIC on the Squid box
when its hanging directly off a border router (which then needs 3 NICs).

> Also, for grins, I just to ubuntu 11.04 with same config and tested with both 2.7Stable9 and 3.HEAD and still get it to work.
>

? "still get it to work"? you missing the words "could not" there?

I know 10.10 lacks libcap2 and has some funky customizations in the
kernel which break it. Those probs were supposed to be fixed in 11.04
though.

  Say what exact version of libcap-2.* do you have compiled into Squid?

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.11
   Beta testers wanted for 3.2.0.5
Received on Wed Mar 16 2011 - 11:25:39 MDT

This archive was generated by hypermail 2.2.0 : Sat Mar 19 2011 - 12:00:01 MDT