[Log in to get rid of this advertisement]

Hello,

I have fedora 12 with kernal 2.6.31 and squid-3.1.0.14 with the configuration enabled as per the TPROXY4 support:
http://wiki.squid-cache.org/Features/Tproxy4

But while start the SQUID i am getting error as:

2010/03/14 11:04:39| Processing Configuration File: /etc/squid/squid.conf (depth 0)
2010/03/14 11:04:39| Starting IP Spoofing on port [::]:3129
2010/03/14 11:04:39| Disabling Authentication on port [::]:3129 (IP spoofing enabled)
2010/03/14 11:04:39| FATAL: http(s)_port: TPROXY support in the system does not work.
FATAL: Bungled squid.conf line 36: http_port 3129 tproxy

How can i proceed further to make the system with TPROXY support?

Thanks.

Can you post the contents of squid.conf please

You follow the instructions on the Squid site, or one of the many how-tos for this.
http://wiki.squid-cache.org/Features/Tproxy4
http://www.visolve.com/squid/sqguide.php

Hello,

Thanks a lot for your replies.

I was trying various options to get this work.

I compiled the kernal again by following the instrcutions of the URL
http://wiki.squid-cache.org/Features/Tproxy4

Now the warning message has gone and started working partially.

When I visit the RIPE.NET it shows my PROXY IP address as my ip address

but When I visit whatismyipaddress.com, it shows me both the IP addresses (HOST and PROXY) by mentioning that there is aproxy server in middle.

Also it indicates some test results as:

rDNS FALSE
WIMIA Test FALSE
TOR Test FALSE
Loc Test FALSE
Header Test TRUE
DNSBL Test FALSE


What all these tests stands for? How can I use these tests to achieve a 100% tranparency.

My configuration is as below:


acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 8080 # proxy port
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 3128
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_port 3128
http_port 3129 tproxy
http_port 3130 transparent
hierarchy_stoplist cgi-bin ?
coredump_dir /usr/local/squid/var/cache
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern






Thanks