Re: "tproxy" problem with squid 2.7 stable with centos 5.9

On 18/02/2013 8:38 p.m., Ahmad wrote:
> Dear all ,
> ive installed centos 5.9 32 bit .
>
> ive compiled the kernel with balabit "tproxy patch" i downloaded the kernel
> & patch from balabit site .
> i also patched the iptables from balabit site with verison 1.4.10.
>
> i followed the articale of how to patch the kernel & iptables from
> http://mattiasgeniar.be/2010/09/01/compile-a-centos-kernel-and-iptables-with-tproxy-support/
>
> ive patched the kernel & iptables successfully ,
>
> ive compiled squid 2.7stable 9 with --enable netfilter

Squid-2.7 does not support multiple interception modes being compiled
into the proxy at once and TPROXYv2 was not built into the Netfilter
components.

Remove the netfilter from your build options and leave just the
--enable-linux-tproxy.

Also, please try an upgrade to Squid-3.2 or later. They have *much*
better TPROXY support.

Amos
Received on Thu Feb 21 2013 - 01:04:19 MST