[squid-users] squid clientside_mark problem

Amos Jeffries squid3 at treenet.co.nz
Wed Oct 17 03:01:31 UTC 2018


On 16/10/18 8:06 PM, morteza omidian wrote:
> Hi
> Witch options do i have to compile with to enable "clientside_mark"??
> 

Let me copy and paste the text from the ACL documentation page I
referenced you to read right at the beginning of these many splintered
discussion multi-thread(s).

Note the lines starting "Uses" and "Requires":

"
 acl aclname clientside_mark mark[/mask] ...

  # matches CONNMARK of an accepted connection [fast]
  #
  # mark and mask are unsigned integers (hex, octal, or decimal).
  # If multiple marks are given, then the ACL matches if at least
  # one mark matches.
  #
  # Uses netfilter-conntrack library.
  # Requires building Squid with --enable-linux-netfilter.
  #
  # The client, various intermediaries, and Squid itself may set
  # CONNMARK at various times. The last CONNMARK set wins. This ACL
  # checks the mark present on an accepted connection or set by
  # Squid afterwards, depending on the ACL check timing. This ACL
  # effectively ignores any mark set by other agents after Squid has
  # accepted the connection.
"

HTH
Amos


More information about the squid-users mailing list