[tproxy] Is there a usable TPROXY4+squid+linuxKernel patches?

[Anton]

Forgot to mention - failed bind appears on firefox with the 
following text, the rest are ok. 

ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: 
http://biog-101-104.bio.cornell.edu/bioG101_104/tutorials/animals/squid.html

The following error was encountered:

    * Connection to biog-101-104.bio.cornell.edu Failed 

The system returned:

    (99) Cannot assign requested address

The remote host or network may be down. Please try the 
request again.

Your cache administrator is webmaster.
Generated Mon, 19 May 2008 16:13:46 GMT by 
(squid/3.HEAD-BZR) 

On Monday 19 May 2008 21:09, Anton wrote:
> Seems squid 3.1 cannot bind on the some sockets even on a
> small load - I've opened 5 tabs on the firefox and got
> the following in the log files. Possibly it's a bug
> during choose of the next available FD? Possibly I should
> report it to squid -dev too?
>
> Possibly this behaviour is so visible on the latent
> (satellite) links, like mine - so the FD occupied longer
> than for those who is on fiber.
>
> May 19 21:01:48 cacheng squid[26551]:
> IPInterception.cc(136) NetfilterInterception:  NF
> getsockopt(SO_ORIGINAL_DST) failed: (11) Resource
> temporarily unava May 19 21:01:48 cacheng squid[26551]:
> IPInterception.cc(169) NetfilterTransparent:  NF
> getsockopt(IP_TRANSPARENT) failed: (92) Protocol not
> available May 19 21:02:50 cacheng squid[26551]:
> IPInterception.cc(136) NetfilterInterception:  NF
> getsockopt(SO_ORIGINAL_DST) failed: (11) Resource
> temporarily unava May 19 21:02:50 cacheng squid[26551]:
> IPInterception.cc(169) NetfilterTransparent:  NF
> getsockopt(IP_TRANSPARENT) failed: (92) Protocol not
> available May 19 21:02:57 cacheng squid[26551]: commBind:
> Cannot bind socket FD 55 to 82.198.21.17:4008: (98)
> Address already in use May 19 21:02:57 cacheng
> squid[26551]: comm.cc(993) commResetFD: bind: (98)
> Address already in use May 19 21:02:57 cacheng
> squid[26551]: commBind: Cannot bind socket FD 55 to
> 82.198.21.17:5407: (98) Address already in use May 19
> 21:02:57 cacheng squid[26551]: comm.cc(993) commResetFD:
> bind: (98) Address already in use
>
> Regards,
> Anton.
>
> On Monday 19 May 2008 19:54, Laszlo Attila Toth wrote:
> > Ming-Ching Tiew wrote:
> > > Laszlo Attila Toth wrote:
> > >> Ming-Ching Tiew wrote:
> > >>> Laszlo Attila Toth wrote:
> > >>>>> For a 2 last monthes periodically looking at the
> > >>>>> http://www.balabit.com/downloads/files/tproxy/
> > >>>>> frequently saw a newer versions pf patches, but I
> > >>>>> was never able to cleanly apply any of the
> > >>>>> patches to any of the corresponding Linux Kernel
> > >>>>> v 2.6.24 or 2.6.25 and the SQUID-3.0STABLE-X
> > >>>>
> > >>>> Strange because the patches are on the top of
> > >>>> v2.6.24 and v2.6.25 tags of Linus' git tree. If
> > >>>> you use any other version of the kernel, could you
> > >>>> tell, where is it available? Now I can check the
> > >>>> patches with kernel releases of Gentoo or
> > >>>> Ubuntu...
> > >>>
> > >>> The last time I checked ( very recent), the kernel
> > >>> patches does not apply cleanly on kernel 2.6.25.2.
> > >>
> > >> This is because the patches are on the top of
> > >> v2.6.25 and not the v2.6.25.2 ( ? ), between them
> > >> there were changes in the source code. Basically I
> > >> maintain only for major versions (2.6.24, 2.6.25
> > >> etc.). I'll check now v2.6.25.4...
> > >
> > > The possibility of this is always there but I really
> > > doubt so. If you check the feedback on the maillist,
> > > there are two independent feedbacks that the patches
> > > do not apply cleanly on 2.6.25 either. My network is
> > > too slow to download, so I have not tried this
> > > myself, forgive me if I said something not basing on
> > > facts. :-)
> >
> > Indeed, sorry. The patcheset was for net-2.6.25.git's
> > somewhere after v2.6.25-rc3.
> >
> > This file is really on the top of v2.6.25:
> > http://www.balabit.com/downloads/files/tproxy/tproxy-ke
> >rn el-2.6.25-20080519-165031-1211208631.tar.bz2
> >
> > I tested only the 2.6.24-version of tproxy.
>
> _______________________________________________
> tproxy mailing list
> tproxy at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/tproxy