On Fri, Dec 08, 2006, Alexandre Correa wrote:
server freeze... after some hours running...
print a lot of error on screen and freeze...
Can you extract some of these errors from logs (if possible) and post them
here?
Adrian
--
- Xenion - http://www.xenion.com.au/ - VPS Hosting -
Hello All,
Does anyone have any numbers on how much overhead tproxy will add ?
Basically, how much drop in performance would we see if tproxy is
enabled.
I imagine that tproxy will have to do some lookup and hence should
incur some overhead.
I also looked at the tproxy mailing list
lör 2006-11-11 klockan 12:36 +0800 skrev Ow Mun Heng:
That's the only good thing about tproxy support? That seems a bit
little.(to me anyway)
Some consider it extremely important, to most it doesn't matter at all.
Regards
Henrik
signature.asc
Description: Detta är en digitalt signerad
lör 2006-11-11 klockan 21:52 +0545 skrev Tek Bahadur Limbu:
Adrian,
What about FreeBSD? I understand that Tproxy is only for Linux. Is there
a workaround for FreeBSD?
The NAT approach to the problem using a private shadow network 1-1
mapped with the real addresses always works, but there
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello Henrik,
What about clients having real static IP addresses who are behind a
squid proxy?
On Sun, 12 Nov 2006 12:31:28 +0100
Henrik Nordstrom [EMAIL PROTECTED] wrote:
lör 2006-11-11 klockan 21:52 +0545 skrev Tek Bahadur Limbu:
Adrian,
sön 2006-11-12 klockan 18:00 +0545 skrev Tek Bahadur Limbu:
What about clients having real static IP addresses who are behind a
squid proxy?
Yes? It's what the scheme is designed for.
The private shadow network is only used between the proxy and the NAT
box..
Regards
Henrik
signature.asc
Adrian,
What about FreeBSD? I understand that Tproxy is only for Linux. Is there
a workaround for FreeBSD?
On Sat, 2006-11-11 at 14:59 +0800, Adrian Chadd wrote:
On Sat, Nov 11, 2006, Ow Mun Heng wrote:
You will still have the same TCP/IP protocol issues if not more.
The only problem
On Sat, Nov 11, 2006, Tek Bahadur Limbu wrote:
Adrian,
What about FreeBSD? I understand that Tproxy is only for Linux. Is there
a workaround for FreeBSD?
Not at the moment. I've heard mumblings from the FreeBSD crowd that its possible
but I haven't had time to investigate.
Adrian
Perhaps I just don't get it. I just upgraded to 2.6.3 and then all of a
sudden, I read baout this TPROXY feature.
It enables client and server ip spoofing and it basically bypasses the
cache (so as to make it really really transparent etc).
So.. if I understand it correctly, the aim of tproxy is
lör 2006-11-11 klockan 00:11 +0800 skrev Ow Mun Heng:
Perhaps I just don't get it. I just upgraded to 2.6.3 and then all of a
sudden, I read baout this TPROXY feature.
It enables client and server ip spoofing and it basically bypasses the
cache (so as to make it really really transparent etc).
On Sat, 2006-11-11 at 00:37 +0100, Henrik Nordstrom wrote:
lör 2006-11-11 klockan 00:11 +0800 skrev Ow Mun Heng:
Perhaps I just don't get it. I just upgraded to 2.6.3 and then all of a
sudden, I read baout this TPROXY feature.
It enables client and server ip spoofing and it basically
On Sat, Nov 11, 2006, Ow Mun Heng wrote:
You will still have the same TCP/IP protocol issues if not more.
The only problem it might solve is access those sites not happy when a
user changes IP when going from http to https.
That's the only good thing about tproxy support? That seems a
On Sat, 2006-11-11 at 14:59 +0800, Adrian Chadd wrote:
On Sat, Nov 11, 2006, Ow Mun Heng wrote:
You will still have the same TCP/IP protocol issues if not more.
The only problem it might solve is access those sites not happy when a
user changes IP when going from http to https.
tor 2006-11-02 klockan 04:13 -0800 skrev zulkarnain:
The kernel and iptables has been patched with the
tproxy patches. This patches should be work since I
saw iptable_tproxy and ipt_tproxy is loaded on kernel.
After squid is start, none can browse the website and
I found many Invalid
Hi all,
I just implement transparent proxy on linux box
consist of;
Fedora Core 4
Kernel 2.6.15
iptables 1.3.5
cttproxy-2.6.15
squid-2.6STABLE4
The kernel and iptables has been patched with the
tproxy patches. This patches should be work since I
saw iptable_tproxy and ipt_tproxy is loaded
hi,
You have to patch the kernel and iptables before compiling squid with tproxy.
You can download the patch from
http://www.balabit.com/downloads/tproxy/
Regards
CS
On 7/5/06, Kashif Ali Bukhari [EMAIL PROTECTED] wrote:
Salam,
i am trying to compile squid on fedoracor 3 with tproxy and get
tor 2006-07-06 klockan 07:53 +0800 skrev Steven Wilton:
Copy the file to /usr/include/linux/netfilter_ipv4/ip_tproxy.h
or if you don't have root access (or don't want to mess with system
headers), create a linux/netfilter_ipv4 directory under the Squid
include directory and copy the file
Salam,
i am trying to compile squid on fedoracor 3 with tproxy and get this
error while configuration
checking if TPROXY header files are installed... no
WARNING: Cannot find TPROXY headers, you need to install the
tproxy package from:
- lynx http://www.balabit.com/downloads/tproxy/
Any help ?
@atinet.com.br
To: squid-users@squid-cache.org
Sent: Tuesday, July 04, 2006 6:09 PM
Subject: [squid-users] Tproxy Headers
I'm trying to compile Squid 2.6 Stable1 with --enable-linux-tproxy option
and the following error is raising:
checking if TPROXY header files are installed... no
WARNING
Copy the file to /usr/include/linux/netfilter_ipv4/ip_tproxy.h
Regards
Steven
-Original Message-
From: Edinilson J. Santos [mailto:[EMAIL PROTECTED]
Sent: Thursday, 6 July 2006 2:04 AM
To: squid-users@squid-cache.org
Subject: Re: [squid-users] Tproxy Headers
I think that squid
I'm trying to compile Squid 2.6 Stable1 with --enable-linux-tproxy option
and the following error is raising:
checking if TPROXY header files are installed... no
WARNING: Cannot find TPROXY headers, you need to install the
tproxy package from:
- lynx http://www.balabit.com/downloads/tproxy/
tis 2006-07-04 klockan 18:09 -0300 skrev Edinilson J. Santos:
I'm trying to compile Squid 2.6 Stable1 with --enable-linux-tproxy option
and the following error is raising:
checking if TPROXY header files are installed... no
WARNING: Cannot find TPROXY headers, you need to install the
We are currently using WCCPv1. I was reading about Tproxy and wanted to
implement that as well. I can't seem to find the answer to my question. Will
Tproxy work with a WCCP setup? If you could shed some light on this that would
be appreciate
Thanks
Keith
mån 2006-06-19 klockan 08:11 -0700 skrev Keith Owen:
We are currently using WCCPv1. I was reading about Tproxy and wanted
to implement that as well. I can't seem to find the answer to my
question. Will Tproxy work with a WCCP setup? If you could shed some
light on this that would be appreciate
hello:
squid-box: 194.6.246.251 on eth0
client: 194.6.246.25
settings:
http_port 194.6.246.251:8080 transparent
linux_tproxy on
tproxy_port 0
iptables -t tproxy -A PREROUTING -p tcp -i eth0 --dport 80 -j TPROXY
--on-port 8080
And i can't spoof my client ipaddress
I always go from
Paweł Staszewski wrote:
hello:
squid-box: 194.6.246.251 on eth0
client: 194.6.246.25
settings:
http_port 194.6.246.251:8080 transparent
linux_tproxy on
tproxy_port 0
iptables -t tproxy -A PREROUTING -p tcp -i eth0 --dport 80 -j TPROXY
--on-port 8080
And i can't spoof my client
hello i have :
kernel 2.6.15.7 with cttproxy patch applien (cleanly)
squid 2.6 with:
config
http_port 192.168.20.2:8080
linux_tproxy on
tproxy_port 8080
/config
squid lan ip:
192.168.20.2
squid wan ip:
192.168.0.10
iptables:
iptables -L -n -v -t tproxy
Chain PREROUTING (policy ACCEPT 579
tproxy patch wil work with live ips
On 6/7/06, Paweł Staszewski [EMAIL PROTECTED] wrote:
hello i have :
kernel 2.6.15.7 with cttproxy patch applien (cleanly)
squid 2.6 with:
config
http_port 192.168.20.2:8080
linux_tproxy on
tproxy_port 8080
/config
squid lan ip:
192.168.20.2
squid wan ip:
Hi!
I'm new to squid user's mailing list and I have some questions
regarding implementation of cttproxy and squid.
Basically, I can't put all the pieces together to build a really
transparent squid box. Does anyone have a mini-howto or tips about
this implementation ?
What I do:
1.- Downloaded
Please respond to
Rodrigo Gesswein [EMAIL PROTECTED]
To
squid-users@squid-cache.org
cc
Subject
[squid-users] tproxy
Hi!
I'm new to squid user's mailing list and I have some questions
regarding implementation of cttproxy and squid.
Basically, I can't put all the pieces together to build
401 - 430 of 430 matches
Mail list logo
