[squid-users] squid clientside_mark problem

morteza omidian morteza1131 at yahoo.com
Wed Oct 17 13:42:38 UTC 2018


HiTank you for your reply.I compiled Squid 4 with these Options and it works!:./configure \
    --enable-linux-netfilter \
    --with-netfilter-conntrack

Tanx.
 

    On Wednesday, October 17, 2018 6:31 AM, Amos Jeffries <squid3 at treenet.co.nz> wrote:
 

 On 16/10/18 8:06 PM, morteza omidian wrote:
> Hi
> Witch options do i have to compile with to enable "clientside_mark"??
> 

Let me copy and paste the text from the ACL documentation page I
referenced you to read right at the beginning of these many splintered
discussion multi-thread(s).

Note the lines starting "Uses" and "Requires":

"
 acl aclname clientside_mark mark[/mask] ...

  # matches CONNMARK of an accepted connection [fast]
  #
  # mark and mask are unsigned integers (hex, octal, or decimal).
  # If multiple marks are given, then the ACL matches if at least
  # one mark matches.
  #
  # Uses netfilter-conntrack library.
  # Requires building Squid with --enable-linux-netfilter.
  #
  # The client, various intermediaries, and Squid itself may set
  # CONNMARK at various times. The last CONNMARK set wins. This ACL
  # checks the mark present on an accepted connection or set by
  # Squid afterwards, depending on the ACL check timing. This ACL
  # effectively ignores any mark set by other agents after Squid has
  # accepted the connection.
"

HTH
Amos
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users


   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20181017/ad9e2bf7/attachment.html>


More information about the squid-users mailing list