[tproxy] Squid-2.6 patch (was: Re: Squid with tproxy extra brief FAQ - take 2)

Laszlo Attila Toth panther at balabit.hu
Mon Mar 3 15:33:01 CET 2008


Gonzalo Arana wrote:
> Try the patch located in http://www.squid-cache.org/bugs/show_bug.cgi?id=2129
> Please, note that this is still unofficial path.  Any feedback about
> it is much appreciated.

Does the foreign bind work with this patch? I rewrote the patch for 
2.6-STABLE18 and perhaps I missed something. What I see on the webserver 
is that the squid connects with its own IP address instead of the 
client's address. Config:
http_port 3128 tproxy

When the new patch will work, I publish it. The changes:
the --enable-tproxy option is dropped, --enable-linux-netfilter is used 
only. Also both REDIRECT and TPROXY target can be used in this case. If 
the tproxy patch isn't in the kernel, it is ignored in squid.


More information about the tproxy mailing list