my wordering is that although tproxy is intergrated with latest kernel source, there is not ip_tproxy.h

i have known that ip_tproxy.h was provided from obsolete kernel source patch in "balabit.com"

but why do squid2.7 need ip_tproxy.h?

so, i downloaded ip_tproxy.h and compiled squid2.7 by using the ip_tproxy.h

and i setted option "http_port 3128 tproxy" in squid.conf.

after compiling and setting, the squid is running but the tproxy doesn't work.

i setted iptables rules following below

-------------------------------------------------------------------------------

setsebool squid_connect_any=1

setsebool squid_use_tproxy=1

iptables -t mangle -N DIVERT

iptables -t mangle -A DIVERT -j MARK --set-mark 1

iptables -t mangle -A DIVERT -j ACCEPT

iptables  -t mangle -A PREROUTING -p tcp -m socket -j DIVERT

iptables  -t mangle -A PREROUTING -p tcp --dport 80 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3128

-------------------------------------------------------------------------------

i must use tproxy in squid 2.7 environment.

could you help me? please..