LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 10-12-2010, 05:43 AM   #1
bilal_mld
LQ Newbie
 
Registered: Jun 2010
Posts: 13

Rep: Reputation: 0
Question How to recompile squid


I am running squid-2.6.STABLE6-4.el5 proxy server on RHEL5 server in my organization.I installed squid rpm available with RHEL5 dvd and the squid is running fine.
now i want to enable-arp-acl on my running squid so that i can bind mac address with there ip addresses.
i searched on google also that how to add arp functionality to already installed squid, but found no appropiate answer.

Please someone help me in adding arp functionality to my already installed and running squid server without disturbing the squid configuration file.
 
Old 10-12-2010, 05:53 AM   #2
prayag_pjs
Senior Member
 
Registered: Feb 2008
Location: Pune - India
Distribution: Fedora,RedHat,CentOS,Gentoo
Posts: 1,145
Blog Entries: 4

Rep: Reputation: 147Reputation: 147
If you want to filter a particular MAC address under squid,use "ARP ACLs" :

Append ACL as follows:

Quote:
acl macf1 arp mac-address
acl macf2 arp 00:11:22:33:44:55
http_access allow macf1
http_access allow macf2
http_access deny all
Save and close the file. Restart squid server:

Quote:
# /etc/init.d/squid restart
 
Old 10-15-2010, 02:12 AM   #3
bilal_mld
LQ Newbie
 
Registered: Jun 2010
Posts: 13

Original Poster
Rep: Reputation: 0
Question

i updated my squid, now its version is squid-2.6.STABLE6-5.el5_1.3

i also downloaded its source rpm that is squid-2.6.STABLE6-5.el5_1.3.src.rpm. Now i am trying to add ARP functionality. My steps are as follows

1. rpm -ivh squid-2.6.STABLE6-5.el5_1.3.src.rpm
2. updatedb
3. vim /usr/src/redhat/SPECS/squid.spec

adding two lines in %configure \ section

--enable-arp \
--enable-arp-acl \

4. rpmbuild -ba /usr/src/redhat/SPECS/squid.spec

5. rpm -ivh /usr/src/redhat/RPMS/i386/squid-2.6.STABLE6-5.3.i386.rpm


All goes fine upto step 4 but in step 5 the following error occured:;

file /usr/sbin/squidclient from install of squid-2.6.STABLE6-5.3 conflicts with file from package squid-2.6.STABLE6-5.el5_1.3


help me why this error occurs...
 
Old 10-15-2010, 02:17 AM   #4
prayag_pjs
Senior Member
 
Registered: Feb 2008
Location: Pune - India
Distribution: Fedora,RedHat,CentOS,Gentoo
Posts: 1,145
Blog Entries: 4

Rep: Reputation: 147Reputation: 147
Hi,

Remove squid-2.6.STABLE6-5.el5_1.3 like this :

Quote:
rpm -e --nodeps squid-2.6.STABLE6-5.el5_1.3
after this again run

Quote:
rpm -ivh /usr/src/redhat/RPMS/i386/squid-2.6.STABLE6-5.3.i386.rpm
 
Old 10-15-2010, 02:27 AM   #5
aries_baluyot
Member
 
Registered: Oct 2010
Location: India
Distribution: Mandriva, Suse, Ubuntu, Centos, Maemo, Omnia Xp
Posts: 86

Rep: Reputation: -11
try to cook it

joke
 
Old 10-15-2010, 06:20 AM   #6
bilal_mld
LQ Newbie
 
Registered: Jun 2010
Posts: 13

Original Poster
Rep: Reputation: 0
Question

very very thanks prayag_pjs, ur way eliminates the conflicts and the package install successfully.. but one new problem arises that is squid is not blocking the mac based access, my acl is as follows

acl mac1 arp E0:BC:7F:82:C0:B1
http_access deny mac1

still the system having the above mac address able to access internet.why is this so... then i tried another option to block its access that is as follows

acl mac1 arp E0:BC:7F:82:C0:B1
acl ip1 arp 10.135.8.210
http_access deny mac1 ip1

but by this method the error occurs when i reload squid

service squid reload
2010/10/15 16:24:04| decode_eth: Invalid ethernet address '10'
2010/10/15 16:24:04| squid.conf line 4348: acl ip1 arp 10.135.8.210
2010/10/15 16:24:04| aclParseArpData: Ignoring invalid ARP acl entry: can't parse '10'
2010/10/15 16:24:04| aclParseAclLine: WARNING: empty ACL: acl ip1 arp 10.135.8.210

try to solve it, n i m sure that u will solve it

thank again

Last edited by bilal_mld; 10-15-2010 at 06:25 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how to recompile squid to enable -enable-storeio=coss ejinh Fedora 2 08-11-2010 04:15 AM
Squid Redirect specific domain to an Secondary (External) Squid Proxy Zxarr Linux - Server 2 04-20-2010 12:50 PM
squid conf: squid failed when I type insert redirect_program /usr/bin/squidguard laxmantsharma Linux - Software 1 02-24-2009 06:02 AM
Squid 2.6 Reverse Proxy from Squid(3128) to OrginServer(80) Not working rraj Linux - Server 0 06-06-2008 02:29 PM
squid conf: squid failed when I type insert redirect_program /usr/bin/squidguard Niceman2005 Linux - Software 1 11-24-2004 02:29 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 09:53 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration