Hello!

I'm trying to follow the instructions in
http://wiki.squid-cache.org/Features/Tproxy4
to build a TPROXY squid using Centos 6.4.

This article mentions that the kernel used must be built with the following configuration options:
NF_CONNTRACK=m
NETFILTER_TPROXY=m
NETFILTER_XT_MATCH_SOCKET=m
NETFILTER_XT_TARGET_TPROXY=m

I have downloaded the source code of Kernel 2.6.34.14 and copied the current kernel configuration to the source code directory. Using "make menuconfig", I found out that all the configuration options above are already included as modules. My question is: Knowing that my current kernel is already built with those options, do I need to replace it? There is another article about TPROXY kernel support (http://mattiasgeniar.be/2010/09/01/c...proxy-support/) that suggests patching the kernel source code before building it, do I need this patch?

If you know any useful resources about TPROXY, I would appreciate if you could share them with me.

Best regards,
Firas

No.

No.

in your search patameters, use transparent intercept iptables squid

there are many posts here @LQ about transparent squid proxy's,

these systems have evolved. Be carefull with the dates of any tutes.

this one in particular helped me get setup ...

linuxhomenetworking.com Proxy config.

Hope this helps.

Hello GlennsPref,

Thanks for your reply. The link you mentioned in your reply is about how to setup a transparent squid proxy. My question is about a TProxy squid, a squid proxy that is transparent to both the client and the web servers. It should masquerade the IP address of the client to achieve this in addition to intercepting client requests transparently.

Best regards,
Firas

oops, my bad... (I feel a bit confused now)

Just want to answer my own question. Kernel 2.6.34.14 that comes with Centos 6.4 does not need to be recompiled in order to support TPROXY and it is ready out of the box.