[tproxy] Squid-2.6 patch (was: Re: Squid with tproxy extra brief FAQ - take 2)

Laszlo Attila Toth panther at balabit.hu
Mon Mar 3 15:33:01 CET 2008


Hi,

Gonzalo Arana wrote:
> 
> Try the patch located in http://www.squid-cache.org/bugs/show_bug.cgi?id=2129
> Please, note that this is still unofficial path.  Any feedback about
> it is much appreciated.
> 

Does the foreign bind work with this patch? I rewrote the patch for 
2.6-STABLE18 and perhaps I missed something. What I see on the webserver 
is that the squid connects with its own IP address instead of the 
client's address. Config:
http_port 3128 tproxy

When the new patch will work, I publish it. The changes:
the --enable-tproxy option is dropped, --enable-linux-netfilter is used 
only. Also both REDIRECT and TPROXY target can be used in this case. If 
the tproxy patch isn't in the kernel, it is ignored in squid.

-- 
Panther


More information about the tproxy mailing list