Search squid archive

Re: Squid as interception proxy with pf

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks to you for all informations... and i'm so sorry....

I've made a little error : you can only enable one transparent mode in squid... and you must not forget to change accces on /dev/pf device.
After it looks ok.

Ghislain

Le 9 déc. 06 à 07:49, Agung T. Apriyanto a écrit :


--- Ghislain Garçon <gigi_8439@xxxxxxxx> wrote:

PF is really filtering and not only squid : yes I
have build pf
integration with my freebsd kernel.
If I look in squid's sources, there is a problem
with these
declarations. I don't known how to test IPNAT_NAME
or IPL_NAT

#ifdef IPNAT_NAME
         natfd = open(IPNAT_NAME, O_RDONLY, 0);
#else
         natfd = open(IPL_NAT, O_RDONLY, 0);
#endif

I looked in kernel sources... and it's look like the
lines above open
a device created by ipfilter... but pf doesn't need
ipfilter in order
to work.

Regards,

Ghislain

seems that somehow your squid was looking for IPF ?
but you said earlier that you've enabled
pf-transparent while compiling squid ? it should
looking for /dev/pf if you enable-pf-transparent

btw was the problem same for 3.0 and 2.6S5 ? because
you also said that you've tried both version in
earlier email




	

	
		
___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux