On 20 January 2015 at 21:50, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 21/01/2015 6:11 a.m., Odhiambo Washington wrote:
> On 20 January 2015 at 16:16, Odhiambo Washington wrote:
>
> 1. I see these in cache.log
>
>
> 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1) Operation
> not permitted 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1)
> Operation not permitted 2015/01/20 20:00:18| WARNING: no_suid:
> setuid(0): (1) Operation not permitted 2015/01/20 20:00:18|
> WARNING: no_suid: setuid(0): (1) Operation not permitted 2015/01/20
> 20:00:18| WARNING: no_suid: setuid(0): (1) Operation not permitted
> 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1) Operation
> not permitted 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1)
> Operation not permitted 2015/01/20 20:00:18| WARNING: no_suid:
> setuid(0): (1) Operation not permitted 2015/01/20 20:00:18|
> WARNING: no_suid: setuid(0): (1) Operation not permitted 2015/01/20
> 20:00:18| WARNING: no_suid: setuid(0): (1) Operation not permitted
> 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1) Operation
> not permitted 2015/01/20 20:00:18| WARNING: no_suid: setuid(0): (1)
> Operation not permitted 2015/01/20 20:00:18| WARNING: no_suid:
> setuid(0): (1) Operation not permitted 2015/01/20 20:00:18|
> WARNING: no_suid: setuid(0): (1) Operation not permitted 2015/01/20
> 20:00:18| WARNING: no_suid: setuid(0): (1) Operation not permitted
Not to worry about. An artifact of how Squid runs helpers vs BSD
default permissions for fork()ed processes. Squid is just unable to
drop root permissions silently (for now) because the OS already did it.
Okay.
> 2015/01/20 20:00:18| Logfile: opening log
> stdio:/usr/local/squid/logs/access.log
>
>
> But then I have no joy because of "2015/01/20 20:03:55| WARNING:
> Forwarding loop detected for:.."
>
> I am almost thinking FreeBSD 9.3 would be better... I haven't seen
> so much grief.
I am beginning to wonder if the PF version may has changed in FreeBSD.
Perhaps I should check, because I am finding it very weird.
In OpenBSD (4.6 IIRC) PF went from a version where rdr-to rules worked
to one where only divert-to would work reliably and rdr-to only
sometimes. It may be that the changover has finally hit FreeBSD.
The OpenBSD one is quite different from the FreeBSD one. They 'parted' ways in development/syntax.
> ADDENDUM: When compiled with --enable-ipf-transparent, it fails to
> compile as follows:
>
As Yuri said, PF --enable-pf-transparent (no 'I') or IPFW
- --enable-ipfw-transparent (note the 'W') for FreeBSD.
I know this. I was just mentioning. I think I believe Yuri that IPFilter isn't in FreeBSD.
I think I am going to have to suck it in, because I am happy with it in many servers, working nicely with Squid.
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
"I can't hear you -- I'm using the scrambler."
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
"I can't hear you -- I'm using the scrambler."
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
