Re: [SQU] Need Info . . .

O.K.

All the appropriate stuff is working. However, the transparent
configuration options are no longer the same in this rev of Squid
(2.4.PRE-STABLE2).

--enable-linux-netfilter . . . I assume this is necessary. But, will I
need to use the iptables redirection commands, or are there any other
changes that should be made.

ulimit -HSn 8192

CFLAGS="-DNUMTHREADS=30" ./configure --prefix=/usr
--exec_prefix=/usr --bindir=/usr/sbin --libexecdir=/usr/lib/squid
--localstatedir=/var --sysconfdir=/etc/squid --enable-async-io
--enable-snmp --enable-poll --enable-linux-netfilter

make all
make install
. . .

Bryan

Henrik Nordstrom wrote:

> Your 2.4.2 kernel most likely have the ECN TCP extension enabled. Some
> firewalls gets confused by this.
>
> echo 0 >/proc/sys/net/ipv4/<something with ecn in the name>
>
> You might also want to disable TCP timestamps which share the same
> problem but to an lesser extent
>
> echo 0 > /proc/sys/net/ipv4/tcp_timestamps
>
> I'll see if I can find the patch needed, or you could try upgrading to
> Squid-2.4 which includes the needed changes.. (I also have a Squid-2.2
> backport of this and some other stuff in the branch hno-2_2-mara on
> cvs.squid.sourceforge.net. I should clean it up a bit and make a new
> "hno" 2.2 snapshot)
>
> --
> Henrik Nordstrom
> Squid hacker
>
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html

-- 
Bryan Campbell - <bbc@misn.com>
Steelville Telephone Exchange
573-775-2111
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html