Re: [squid-users] Squid as interception proxy with pf

Thanks to you for all informations... and i'm so sorry....

I've made a little error : you can only enable one transparent mode
in squid... and you must not forget to change accces on /dev/pf device.
After it looks ok.

Ghislain

Le 9 déc. 06 à 07:49, Agung T. Apriyanto a écrit :

>
> --- Ghislain Garçon <gigi_8439@yahoo.fr> wrote:
>
>> PF is really filtering and not only squid : yes I
>> have build pf
>> integration with my freebsd kernel.
>> If I look in squid's sources, there is a problem
>> with these
>> declarations. I don't known how to test IPNAT_NAME
>> or IPL_NAT
>>
>> #ifdef IPNAT_NAME
>> natfd = open(IPNAT_NAME, O_RDONLY, 0);
>> #else
>> natfd = open(IPL_NAT, O_RDONLY, 0);
>> #endif
>>
>> I looked in kernel sources... and it's look like the
>> lines above open
>> a device created by ipfilter... but pf doesn't need
>> ipfilter in order
>> to work.
>>
>> Regards,
>>
>> Ghislain
>
> seems that somehow your squid was looking for IPF ?
> but you said earlier that you've enabled
> pf-transparent while compiling squid ? it should
> looking for /dev/pf if you enable-pf-transparent
>
> btw was the problem same for 3.0 and 2.6S5 ? because
> you also said that you've tried both version in
> earlier email
>
>

        
                
___________________________________________________________________________
Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions !
Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses
http://fr.answers.yahoo.com
Received on Mon Dec 11 2006 - 04:14:21 MST