Re: [squid-users] RE: RE: Tproxy Squid 3.1

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 02 May 2012 15:22:07 +1200

On 02.05.2012 13:10, Daniel Echizen wrote:
>
>
> Thanks for the reply!
> sorry about lack of info..
> ok.. my diagram is exactly like that:
>
>
>
> Internet <-> SquidBox (v 3.1) <-> Mikrotik <-> Client--tplink_router
>

With a Mikrotik between Squid and the TP-link there should be no issues
whatsoever. No more than if the Squid box was a normal bridge or router
device (which it is technically).

> the tplink is used in the client to dial pppoe and share connection
> inside the client's house
> my kernel version is 2.6.31-14 ..maybe something related with my
> kernel? can you recomend me a version with tproxy support?
> iptables is 1.4.3
> ebtables 2.0.10-4
>
> i'll try another kernel version.. thanks for the reply and hope for
> more help!

You need at minimum a iptables upgrade to 1.4.10. Strange that it
should be working at all without that.

If you can update the kernel to 2.6.37 or later that would be great,
but 2.6.31 has somewhat useable TPROXYv4 support. So long as you are
aware the rp_filter config there is quite different from the current
kernels and documented TPROXY settings.

And Squid built against libcap 2.x (_NOT_ lib*p*cap).

The gritty details are all here:
http://wiki.squid-cache.org/Features/Tproxy4#Minimum_Requirements_.28IPv6_and_IPv4.29

Amos
Received on Wed May 02 2012 - 03:22:12 MDT

This archive was generated by hypermail 2.2.0 : Wed May 02 2012 - 12:00:03 MDT