Re: [squid-users] Implement Tproxy on Debian squeeze

From: David Touzeau <david.touzeau_at_fr.kaspersky.com>
Date: Fri, 02 Mar 2012 16:37:00 +0100

Thanks Amos

So to be clear for me

I need to enable backports in my sources.list and upgrade the kernel
version to 2.6.37 or above in order to make TPROXY already compiled in
the kernel ?

Le 02/03/2012 16:01, Amos Jeffries a écrit :
> On 2/03/2012 11:03 p.m., David Touzeau wrote:
>> Thanks Amos
>>
>> This is my debian kernel version
>>
>> Linux squid32.localhost.localdomain 2.6.32-5-686 #1 SMP Mon Jan 16
>> 16:04:25 UTC 2012 i686 GNU/Linux
>>
>>
>> iptables -t tproxy -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j
>> TPROXY --on-port 80
>>
>>
>> WARNING: All config files need .conf: /etc/modprobe.d/fuse, it will
>> be ignored in a future release.
>> iptables v1.4.8: can't initialize iptables table `tproxy': Table does
>> not exist (do you need to insmod?)
>> Perhaps iptables or your kernel needs to be upgraded.
>>
>> TProxy feature is not compiled..
>>
>
> Darn. I thought they were at .37.
>
> It looks like there may be a backport. Otherwise it would be Wheezy
> that you need then I'm afraid. 2.6.32 is not really even worth
> re-building, what you get is a slightly buggy TPROXY.
>
> On the good side Wheezy works very well. I've been running with those
> repositories on production servers quite happily.
>
> Amos
>
>
Received on Fri Mar 02 2012 - 15:37:14 MST

This archive was generated by hypermail 2.2.0 : Fri Mar 02 2012 - 12:00:02 MST