On 23 January 2015 at 18:42, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 24/01/2015 4:29 a.m., Odhiambo Washington wrote:
> On 23 January 2015 at 17:33, Amos Jeffries <squid3@xxxxxxxxxxxxx>
> wrote:
<snip>
> And the good news is that squid-3.5.1 is now allowing client PCs to
> browse. Thank you for that.
>
Horray!
THANK YOU once again:)
> I still have issues to raise (though my small brain is now so
> saturated):
>
>
> Here is what I use:
>
> ./configure --prefix=/opt/squid35 \ --enable-removal-policies="lru
> heap" \ --disable-epoll \ --enable-auth \ --enable-auth-basic="DB
> NCSA PAM PAM POP3 SSPI" \ --enable-external-acl-helpers="session
> unix_group file_userip" \ --enable-auth-negotiate="kerberos" \
> --with-pthreads \ --enable-storeio="ufs diskd rock aufs" \
> --enable-delay-pools \ --enable-snmp \ --with-openssl=/usr \
> --enable-forw-via-db \ --enable-cache-digests \ --enable-wccpv2 \
> --enable-follow-x-forwarded-for \ --with-large-files \
> --enable-large-cache-files \ --enable-esi \ --enable-kqueue \
> --enable-icap-client \ --enable-kill-parent-hack \ --enable-ssl \
> --enable-leakfinder \ --enable-ssl-crtd \
> --enable-url-rewrite-helpers \ --enable-xmalloc-statistics \
> --enable-stacktraces \ --enable-zph-qos \ --enable-eui \
> --with-nat-devpf \ --enable-pf-transparent \
> --enable-ipf-transparent
>
>
> It seems I have to remove --enable-ipf-transparent otherwise the
> build fails. I was thinking I could have both of
> --enable-ipf-transparent and --enable-ipf-transparent so that I can
> be able to use either PF or IPFilter - whichever I want.
>
>
> Are those two mutually exclusive?
Thats a maybe. The original design was to enable that, but doing so
may repeat the issue you just resolved. From what I can tell those two
firewalls should be okay together on FreeBSD at this point.
> When I have the two, the build fails with:
>
> root@mail:/usr/home/wash/squid-3.5.1-20150120-r13736 # gmake Making
> all in compat gmake[1]: Entering directory
> '/usr/home/wash/squid-3.5.1-20150120-r13736/compat' depbase=`echo
> assert.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ../libtool
> --tag=CXX --mode=compile clang++ -DHAVE_CONFIG_H -I..
> -I../include -I../lib -I../src -I../include -I/usr/include
> -I/usr/include -I../libltdl -I/usr/include
> -I/usr/local/include/libxml2 -I/usr/local/include/libxml2 -Werror
> -Qunused-arguments -D_REENTRANT -g -O2 -march=native
> -I/usr/local/include -MT assert.lo -MD -MP -MF $depbase.Tpo -c -o
> assert.lo assert.cc &&\ mv -f $depbase.Tpo $depbase.Plo libtool:
> compile: clang++ -DHAVE_CONFIG_H -I.. -I../include -I../lib
> -I../src -I../include -I/usr/include -I/usr/include -I../libltdl
> -I/usr/include -I/usr/local/include/libxml2
> -I/usr/local/include/libxml2 -Werror -Qunused-arguments
> -D_REENTRANT -g -O2 -march=native -I/usr/local/include -MT
> assert.lo -MD -MP -MF .deps/assert.Tpo -c assert.cc -fPIC -DPIC -o
> .libs/assert.o In file included from assert.cc:9: In file included
> from ../include/squid.h:43: ../compat/compat.h:49:57: error:
> expected value in _expression_ #if IPF_TRANSPARENT &&
> USE_SOLARIS_IPFILTER_MINOR_T_HACK ^
Seems to be a bug in the autoconf detections. You can workaround it
for now by adding this to your option list:
CXXFLAGS="-DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0"
(or if you unluckily hit build errors mentioning minor_t re-definition
try setting it to =1).
I could be getting it all wrong, but there is where I end:
root@mail:/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736 # env
<cut>
CC=clang
CXX=clang++
CXXFLAGS=-DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0
</cut>
root@mail:/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736 # gmake
Making all in compat
gmake[1]: Entering directory '/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736/compat'
depbase=`echo assert.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\
/bin/sh ../libtool --tag=CXX --mode=compile clang++ -DHAVE_CONFIG_H -I.. -I../include -I../lib -I../src -I../include -I/usr/include -I/usr/include -I../libltdl -I/usr/include -I/usr/local/include/libxml2 -I/usr/local/include/libxml2 -Werror -Qunused-arguments -D_REENTRANT -DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0 -march=native -I/usr/local/include -MT assert.lo -MD -MP -MF $depbase.Tpo -c -o assert.lo assert.cc &&\
mv -f $depbase.Tpo $depbase.Plo
libtool: compile: clang++ -DHAVE_CONFIG_H -I.. -I../include -I../lib -I../src -I../include -I/usr/include -I/usr/include -I../libltdl -I/usr/include -I/usr/local/include/libxml2 -I/usr/local/include/libxml2 -Werror -Qunused-arguments -D_REENTRANT -DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0 -march=native -I/usr/local/include -MT assert.lo -MD -MP -MF .deps/assert.Tpo -c assert.cc -fPIC -DPIC -o .libs/assert.o
In file included from assert.cc:9:
In file included from ../include/squid.h:12:
../include/autoconf.h:1431:9: error: 'USE_SOLARIS_IPFILTER_MINOR_T_HACK' macro redefined [-Werror]
#define USE_SOLARIS_IPFILTER_MINOR_T_HACK
^
<command line>:3:9: note: previous definition is here
#define USE_SOLARIS_IPFILTER_MINOR_T_HACK 0
^
In file included from assert.cc:9:
In file included from ../include/squid.h:43:
../compat/compat.h:49:57: error: expected value in _expression_
#if IPF_TRANSPARENT && USE_SOLARIS_IPFILTER_MINOR_T_HACK
^
2 errors generated.
Makefile:921: recipe for target 'assert.lo' failed
gmake[1]: *** [assert.lo] Error 1
gmake[1]: Leaving directory '/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736/compat'
Makefile:567: recipe for target 'all-recursive' failed
gmake: *** [all-recursive] Error 1
Plus I still have to ask:
--with-pf-transoparent --with-nat-devpf works now as expected.
How about if I only had --enable-ipf-transparent ?? It means I would be stuck still?
Is there a workaround for IPFilter on FreeBSD not to cause the loop?
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
"I can't hear you -- I'm using the scrambler."
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
"I can't hear you -- I'm using the scrambler."
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
