Hi Henrik, Now I upgrade and compile squid to 2.6Stable5. If squid.conf configured not to use specific ip address on tcp_outgoing_address, there an error messages on cache.log as shown below. How ever with this config I'm able to browser website but unable to spoof client ipaddress. 2006/11/04 02:25:03| tproxy ip=192.168.1.2,0x1b9f5bcb,port=0 ERROR ASSIGN 2006/11/04 02:25:08| tproxy ip=192.168.1.2,0x1b9f5bcb,port=0 ERROR ASSIGN 2006/11/04 02:25:12| tproxy ip=192.168.1.3,0x1c9f5bcb,port=0 ERROR ASSIGN 2006/11/04 02:25:15| tproxy ip=192.168.1.2,0x1c9f5bcb,port=0 ERROR ASSIGN and If I'm using specific ip address, the error messages as below and none can't access websites. 2006/11/04 01:05:46| commBind: Cannot bind socket FD 16 to 192.168.1.3:0: (99) Cannot assign requested address 2006/11/04 01:05:46| commBind: Cannot bind socket FD 16 to 192.168.1.2:0: (99) Cannot assign requested address 2006/11/04 01:05:46| commBind: Cannot bind socket FD 16 to 192.168.1.3:0: (99) Cannot assign requested address any help would be great. Thanks. rgds, Zul --- Henrik Nordstrom <henrik@xxxxxxxxxxxxxxxxxxx> wrote: > fre 2006-11-03 klockan 01:13 -0800 skrev zulkarnain: > > > http_port 3128 tproxy transparent > > Ok. > > > ---iptables rule > > iptables -t tproxy -A PREROUTING -i eth1 -p tcp -m > tcp > > --dport 80 -j TPROXY --on-port 3128 > > Also looks fine. > > No idea what goes wrong. Should work from what I can > tell, but I don't > have an environment where I can test tproxy. > > Regards > Henrik > ____________________________________________________________________________________ Low, Low, Low Rates! Check out Yahoo! Messenger's cheap PC-to-Phone call rates (http://voice.yahoo.com)
