Re: [squid-users] Flag this message Trouble building Squid with Linux Transparent Proxy support

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 16 Jul 2008 17:03:36 +1200 (NZST)

> I am trying to build Squid with Linux Transparent Proxy support on Fedora
> 9.
>
> Here is the message I am getting on the configure:
>
> checking if Linux (Netfilter) kernel header files are installed... no
> WARNING: Cannot find necessary Linux kernel (Netfilter) header files
> Linux Transparent Proxy support WILL NOT be enabled
> checking if TPROXY header files are installed... no
>
> I also see errors like these:
>
> checking for linux/netfilter_ipv4.h... no
> checking for linux/netfilter_ipv4/ip_tproxy.h... no
>
>
> netfilter is installed on the machine. Any ideas?

TPROXY support is a little muddled at present. With with some kernels
supporting TPROXY v4 natively or some v4 after patching, others only the
obsolete v2.2 after patching.

Those are squids tests for v2.2 support (due to the --enable-tproxy
option). If thats the right version of TPROXY you wanted, AND you have
patched your kernel correctly prior to building squid, I'll take a look
and see why its failing.

If you meant to build with the new TPROXYv4+ support, you will need the
3-HEAD (3.1 beta) code. The -tproxy option only needed to enable v2.2
support there.

> Here are the systems particulars:
>
> [root_at_squid0 squid-3.0.STABLE7]# uname -a
> Linux squid0.localdomain 2.6.25.9-76.fc9.i686 #1 SMP Fri Jun 27 16:14:35
> EDT 2008 i686 i686 i386 GNU/Linux
>
>
>
> Here is the whole configure:
>
> [root_at_squid0 squid-3.0.STABLE7]# ./configure --prefix=/opt/TCSsquid
> --enable-storeio=ufs,aufs,coss,null --with-aufs-threads=44 --with-pthreads
> --enable-icmp --enable-delay-pools --enable-icap-client
> --enable-useragent-log --enable-referer-log --enable-ssl
> --enable-cache-digests --enable-default-err-language=English
> --enable-err-languages=English --enable-linux-netfilter
> --enable-linux-tproxy --with-default-user=squid
> --with-openssl=/tmp/openssl-0.9.8h/include/openssl/
>
Received on Wed Jul 16 2008 - 05:03:39 MDT

This archive was generated by hypermail 2.2.0 : Wed Jul 16 2008 - 12:00:04 MDT