We have a couple of squid (2.3stable4) cache hosts (Solaris 8/x86) on the
external interface of an Allot NetEnforcer.
The original build of squid didn't include --enable-ipf-transparent, but
we installed IPfilt (3.4.16) later, with the following NAT rule:
rdr iprb0 0.0.0.0/0 port 80 -> <cache_host_ip> port 3128 tcp
It seems to work fine. The NetEnforcer sends HTTP directly to the cache,
which happily processes and requests and behaves normally.
Is enable-ipf-transparent necessary, then? It doesn't seem to be.
Further, I can't get squid to compile anyway--the varargs problem is
solved, but the redec of 'Counters' isn't. Any ideas?
Wyman Miles
Senior Systems Administrator, Rice University, Texas.
(713) 348-5827, e-mail:wymanm@rice.edu, pager:wymanm@pager.rice.edu
-- To unsubscribe, see http://www.squid-cache.org/mailing-lists.htmlReceived on Wed Feb 07 2001 - 16:06:36 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:57:55 MST