Re: [squid-users] ./configure with TProxy

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 29 Feb 2012 17:34:14 +1300

On 29/02/2012 4:58 p.m., cc wrote:
> Amos Jeffries wrote:
>
>> Two things:
>>
>> 1) "libpcap" is not "libcap or libcap2". libcap2 is a linux
>> security library to enable low-privileged users capabilities (get
>> it "cap...") for safe access to high security actions (specifically
>> IP spoofing). [I can't say where to find it sorry, maybe somone
>> else here can, but that should be enoough to get you back on the
>> right track to finding it
> anyway].
> Oh. I feel dumb. It's interesting how one letter changes the whole
> thing. :) For some reasons, when I saw 'libcap', I think 'libpcap'.
>
>> 2) --enable-linux-tproxy is for TPROXY version 2 support (Linux 2.2
>> or so). These days you should not need it on anything other than
>> embeded systems with old kernels. It requires additional kernel
>> patching.
>>
> So basically, I should just use intercept proxy?

No. If your kernel is recent (2.6.37+) it has TPROXY version 4 built
into netfilter firewall. So it is available with just
--enable-linux-netfilter.

Amos
Received on Wed Feb 29 2012 - 04:34:19 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 29 2012 - 12:00:06 MST