KOVACS Krisztian wrote:
Hi,
2005-01-14, p keltezéssel 12.13-kor Eskay Lee ezt írta:
I setup linux+bridge+squid+tproxy to see the client IP address on Web server. As the manuals, I configured all the patches and parameters. In squid.conf, I did "linux_tproxy on" but I don't know how to set "tcp_outgoing _address". My squid box is a just bridge not Gateway. Please let me know How to set "tcp_outgoing_address" on bridge mode. Also I put the one IP address, i.e, 10..1.1.100 as tcp_outgoing_address, web server is 10.1.1.120.
Then If I browse the URL on Web server, I got the error like followings: ERROR The requested URL could not be retrieved . Socket Failure (99) Cannot assign requested address
How can I solve this problem?
Did you follow the steps outlined in http://www.sanog.org/resources/sanog4-devdas-transproxy.pdf ? BTW, I've never seen this document before, but looks interesting for sure.
Please note that the Squid patch for tproxy support mentioned on the page above is completely independent from BalaBit and the authors of the tproxy patch, and was kindly contributed by Gianni Tedesco and James MacLean. I'm not really sure, but I'd say that in your case bind() fails because you did not have any interfaces configured with 10.1.1.100. Try creating a dummy interface (dummy0), and adding the address 10.1.1.100 to that interface.
Not sure I can add much as we are not currently using this squid setup, but the main things I see in the squid.conf that was being used are : linux_tproxy on tcp_outgoing_address <real IP> Looks like I tried some of the local, private IP's on the box, but settled with a routeable one. Looking in the squid logs really helped me figure out what was happening.
Also Can I use some gzip compression mode on Squid ?
I must admit that I don't really know Squid, so probably I'm not the right person to ask. Have you already tried the Squid documentation, or the Squid users mailing list?
And this I do not have any experience with, sorry :(. JES