[tproxy] Latest tproxy patch for kernel, iptables and squid

[KOVACS Krisztian]

Hi,

On cs, dec 04, 2008 at 12:02:44 +0100, Balazs Scheidler wrote:
> > The strange thing is when I'm trying to create swap directories. See:
> > 
> > # ./squid -z
> > 2008/12/03 23:07:10| http(s)_port: TPROXY option requires its own 
> > interception port. It cannot be shared.
> > FATAL: Bungled squid.conf line 992: http_port 50080 tproxy transparent
> > Squid Cache (Version 3.HEAD-20081121): Terminated abnormally.
> > CPU Usage: 0.004 seconds = 0.000 user + 0.004 sys
> > Maximum Resident Size: 0 KB
> > Page faults with physical i/o: 0
> > 
> > I don't understand why of this problem.
> > No one process is using that port.
> > 
> > What can I do ?
> > 
> > Thanks!
> 
> Well since I haven't used squid myself, you should ask this question on
> the squid mailing list.
> 
> The only relevant info I've found is:
> 
> http://wiki.squid-cache.org/Features/Tproxy4
> 
> This says that you need to use:
> http_port 3129 tproxy
> 
> But judging the error message above, it says that you are using 50080
> port for other purposes in the same squid.conf.

Yes, the problem is that you are not allowed mark a HTTP listener as
'tproxy' and as 'transparent' at the same time. This has changed recently
in squid, the information on the wiki page Balazs has mentioned should be
the most up-to-date.

-- 
KOVACS Krisztian