I updated with the squid-3.1.10 rpm , using rpmbuild to rebuild it....I figured the squid 3.1.4 that came with cent6 was old enough to be asking for trouble. The 3.1.10 RPM built fine, installed fine, but gave the same error on startup, but only when attempting a startup using the init script supplied by the RPM file. Doing a "service squid start" would always give the error: 2011/07/13 22:32:23| FATAL: http(s)_port: TPROXY support in the system does not work. FATAL: Bungled squid.conf line 66: http_port 3129 tproxy Squid Cache (Version 3.1.10): Terminated abnormally. CPU Usage: 0.008 seconds = 0.006 user + 0.002 sys Maximum Resident Size: 21984 KB Page faults with physical i/o: 0 2011/07/13 22:34:38| WARNING cache_mem is larger than total disk cache space! (This is assuming on have http_port 3129 tproxy in /etc/squid/squid.conf) When I started the squid process as root manually, I didn't get an error. So I then issued the following on the root command line: setsebool squid_connect_any=1 setsebool squid_use_tproxy=1 Note: using "=any" as noted on the squid wiki gave an illegal Boolean error from setsebool. After doing this, I can now do "service squid start" and it doesn't error. Squid is now starting and it is registering with the router via WCCP. Tomorrow I will test tproxy/squid operation with clients and see how things go. Assuming everything works, I will have a fairly easy centos v6 Squid/TPROXY/WCCP howto to share. CentOS 6 has been pretty stable in testing both in the beta and the release. Nicholas -----Original Message----- From: Amos Jeffries [mailto:squid3@xxxxxxxxxxxxx] Sent: Wednesday, July 13, 2011 6:28 PM To: squid-users@xxxxxxxxxxxxxxx Subject: Re: Squid3 on CentOS 6 and tproxy On Wed, 13 Jul 2011 15:54:54 -0500, Ritter, Nicholas wrote: > In testing CentOS 6 and Squid v3.1 (as it comes with CentOS 6) I get > the error on squid startup: > > 2011/07/13 15:36:45| Processing Configuration File: > /etc/squid/squid.conf (depth 0) > 2011/07/13 15:36:45| Starting IP Spoofing on port [::]:3129 > 2011/07/13 15:36:45| Disabling Authentication on port [::]:3129 (IP > spoofing enabled) > 2011/07/13 15:36:45| FATAL: http(s)_port: TPROXY support in the system > does not work. > > I think this may be related to capability checking based on a > squid-users thread I read which was dated 2/2/2010. > > Before I go and download and build a squid-3.1.14 rpm for CentOS 6, > can someone comment on this issue, and any fixes, etc.? > > I am working on a an updated CentOS 6 with squid, TPROXY, and WCCP > setup howto. > > Thanks, > > Nicholas If your version was from before the TPROXY probing was added, then an upgrade is definitely useful. If only to know what is broken. Probing added debug level 3,3 log entries about the capabilities and build now tests some library version requirements. Amos
