|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 If i do durty hack with editing these includes (ip_compat.h or ip_nat.h), configuration went ok, but build interceptor has errors and squid cannot be build. Also, squid 3.4.8 in OpenCSW repository (built with ipf transparent option) also cannot work in transparent mode. So, need help - I need transparent proxy, not forwarding. 2.7 is too obsolete and contains strange bug (sometimes dies with fatal error when high load). Change OS is not an option. WBR, Yuri 18.12.2014 20:11, Kinkie ?????: > Hello Yuri, > this is probably a system header dependency. > Could you check if the manuals mention anything about ipfmutex_t ? If > they do, at the beginning of the page they should include a list of > #include <...> lines. Could you copy-paste these lines here? > > Thanks > > On Thu, Dec 18, 2014 at 3:01 PM, Yuri Voinov <yvoinov@xxxxxxxxx> wrote: >> > Hi there, > > yesterday (and during last four day) I've try to build transparent > caching proxy on Solaris 10 (x86_64) testing environment. > > Configuration options are: > > # Without SSL 64 bit GCC > ./configure '--prefix=/usr/local/squid' '--enable-translation' > '--enable-external-acl-helpers=file_userip,unix_group' > '--enable-icap-client' '--enable-ipf-transparent' > '--enable-storeio=diskd' '--enable-removal-policies=lru,heap' > '--enable-devpoll' '--disable-wccp' '--enable-wccpv2' > '--enable-http-violations' '--enable-follow-x-forwarded-for' > '--enable-arp-acl' '--enable-htcp' '--enable-cache-digests' '--with-dl' > '--enable-auth-negotiate=none' '--disable-auth-digest' > '--disable-auth-ntlm' '--disable-auth-basic' > '--enable-storeid-rewrite-helpers=file' > '--enable-log-daemon-helpers=file' '--with-filedescriptors=131072' > '--with-build-environment=POSIX_V6_LP64_OFF64' 'CFLAGS=-O3 -m64 -fPIE > -fstack-protector -mtune=core2 --param=ssp-buffer-size=4 -pipe' > 'CXXFLAGS=-O3 -m64 -fPIE -fstack-protector -mtune=core2 > --param=ssp-buffer-size=4 -pipe' 'CPPFLAGS=-I/usr/include > -I/opt/csw/include' 'LDFLAGS=-fPIE -pie -Wl,-z,now' > > But binaries built without interceptor support. > > Some investigation: > > Config.log has errors with ip_nat.h compilation: > > configure:27435: checking for netinet/ip_nat.h > configure:27435: g++ -c -m64 -O3 -m64 -fPIE -fstack-protector > -mtune=core2 --param=ssp-buffer-size=4 -pipe -march=native -std=c++11 > -I/usr/include -I/opt/csw/include -I/usr/include/gssapi > -I/usr/include/kerberosv5 conftest.cpp >&5 > In file included from conftest.cpp:266:0: > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:98:2: > error: 'ipfmutex_t' does not name a type > ipfmutex_t nat_lock; > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:108:2: > error: 'frentry_t' does not name a type > frentry_t *nat_fr; /* filter rule ptr if appropriate */ > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:112:2: > error: 'ipftqent_t' does not name a type > ipftqent_t nat_tqe; > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:113:2: > error: 'u_32_t' does not name a type > u_32_t nat_flags; > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:114:2: > error: 'u_32_t' does not name a type > u_32_t nat_sumd[2]; /* ip checksum delta for data segment */ > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:115:2: > error: 'u_32_t' does not name a type > u_32_t nat_ipsumd; /* ip checksum delta for ip header */ > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:116:2: > error: 'u_32_t' does not name a type > u_32_t nat_mssclamp; /* if != zero clamp MSS to this */ > ^ > /opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:117:2: > error: 'i6addr_t' does not name a type > i6addr_t nat_inip6; > > and so, configure does not see IP Filter finally, ergo cannot build > interceptor. > > Yes, IP Filter installed in system. Yes, I've try to build 32 bit also. > Yes, I've try to build on another system. Yes, I've try to play with > configure option. Yes, I've try also development version 3.5.x - with > the same result. > > Amos, need your help. > > Thanks in advance, > > WBR, Yuri > >> >> >> _______________________________________________ >> squid-users mailing list >> squid-users@xxxxxxxxxxxxxxxxxxxxx >> http://lists.squid-cache.org/listinfo/squid-users > > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBAgAGBQJUlCv/AAoJENNXIZxhPexGyYUH/jl6MeJZcF/Krw+nYL/okEO6 YAH0k+zk/p2uhXARenFNXpoTJkUwi1yoOFrmCgo2sgw9wmEk418OGKTii+JgDh2L ZpI0pvGhmkX84bbFuyU4SkXRi+NZAcR0gJRfCra7itibeDvJ7DlOm2pxuteLXqdz EduGcMI8l2jmVf6Ib3CVKfYNXPMhJiPmIkXuPCfms+T2CLFuGRvrwoM44SjKra8e vADuIBJkUF6kg0psz3GmNQLm2NLqusB8yt7kF0/WecK5OkeIGXI5JY+jJrGkrnI1 UtRau1AsxqVz9gWsptArUwWVfBazxYZNk73/4PI5MqQTtVJ8ilOAjn1WxnImTaQ= =PGXC -----END PGP SIGNATURE----- |
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
