<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA1 <br>
<br>
If i do durty hack with editing these includes (ip_compat.h or
ip_nat.h), configuration went ok,<br>
but build interceptor has errors and squid cannot be build.<br>
<br>
Also, squid 3.4.8 in OpenCSW repository (built with ipf transparent
option) also cannot work in transparent mode.<br>
<br>
So, need help - I need transparent proxy, not forwarding.<br>
<br>
2.7 is too obsolete and contains strange bug (sometimes dies with
fatal error when high load).<br>
<br>
Change OS is not an option.<br>
<br>
WBR, Yuri<br>
<br>
18.12.2014 20:11, Kinkie ?????:<br>
<span style="white-space: pre;">> Hello Yuri,<br>
> this is probably a system header dependency.<br>
> Could you check if the manuals mention anything about
ipfmutex_t ? If<br>
> they do, at the beginning of the page they should include a
list of<br>
> #include <...> lines. Could you copy-paste these lines
here?<br>
><br>
> Thanks<br>
><br>
> On Thu, Dec 18, 2014 at 3:01 PM, Yuri Voinov
<a class="moz-txt-link-rfc2396E" href="mailto:yvoinov@gmail.com"><yvoinov@gmail.com></a> wrote:<br>
>><br>
> Hi there,<br>
><br>
> yesterday (and during last four day) I've try to build
transparent<br>
> caching proxy on Solaris 10 (x86_64) testing environment.<br>
><br>
> Configuration options are:<br>
><br>
> # Without SSL 64 bit GCC<br>
> ./configure '--prefix=/usr/local/squid'
'--enable-translation'<br>
> '--enable-external-acl-helpers=file_userip,unix_group'<br>
> '--enable-icap-client' '--enable-ipf-transparent'<br>
> '--enable-storeio=diskd' '--enable-removal-policies=lru,heap'<br>
> '--enable-devpoll' '--disable-wccp' '--enable-wccpv2'<br>
> '--enable-http-violations' '--enable-follow-x-forwarded-for'<br>
> '--enable-arp-acl' '--enable-htcp' '--enable-cache-digests'
'--with-dl'<br>
> '--enable-auth-negotiate=none' '--disable-auth-digest'<br>
> '--disable-auth-ntlm' '--disable-auth-basic'<br>
> '--enable-storeid-rewrite-helpers=file'<br>
> '--enable-log-daemon-helpers=file'
'--with-filedescriptors=131072'<br>
> '--with-build-environment=POSIX_V6_LP64_OFF64' 'CFLAGS=-O3
-m64 -fPIE<br>
> -fstack-protector -mtune=core2 --param=ssp-buffer-size=4
-pipe'<br>
> 'CXXFLAGS=-O3 -m64 -fPIE -fstack-protector -mtune=core2<br>
> --param=ssp-buffer-size=4 -pipe' 'CPPFLAGS=-I/usr/include<br>
> -I/opt/csw/include' 'LDFLAGS=-fPIE -pie -Wl,-z,now'<br>
><br>
> But binaries built without interceptor support.<br>
><br>
> Some investigation:<br>
><br>
> Config.log has errors with ip_nat.h compilation:<br>
><br>
> configure:27435: checking for netinet/ip_nat.h<br>
> configure:27435: g++ -c -m64 -O3 -m64 -fPIE -fstack-protector<br>
> -mtune=core2 --param=ssp-buffer-size=4 -pipe -march=native
-std=c++11<br>
> -I/usr/include -I/opt/csw/include -I/usr/include/gssapi<br>
> -I/usr/include/kerberosv5 conftest.cpp >&5<br>
> In file included from conftest.cpp:266:0:<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:98:2:<br>
> error: 'ipfmutex_t' does not name a type<br>
> ipfmutex_t nat_lock;<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:108:2:<br>
> error: 'frentry_t' does not name a type<br>
> frentry_t *nat_fr; /* filter rule ptr if appropriate */<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:112:2:<br>
> error: 'ipftqent_t' does not name a type<br>
> ipftqent_t nat_tqe;<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:113:2:<br>
> error: 'u_32_t' does not name a type<br>
> u_32_t nat_flags;<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:114:2:<br>
> error: 'u_32_t' does not name a type<br>
> u_32_t nat_sumd[2]; /* ip checksum delta for data segment
*/<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:115:2:<br>
> error: 'u_32_t' does not name a type<br>
> u_32_t nat_ipsumd; /* ip checksum delta for ip header */<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:116:2:<br>
> error: 'u_32_t' does not name a type<br>
> u_32_t nat_mssclamp; /* if != zero clamp MSS to this */<br>
> ^<br>
>
/opt/csw/lib/gcc/i386-pc-solaris2.10/4.9.2/include-fixed/netinet/ip_nat.h:117:2:<br>
> error: 'i6addr_t' does not name a type<br>
> i6addr_t nat_inip6;<br>
><br>
> and so, configure does not see IP Filter finally, ergo cannot
build<br>
> interceptor.<br>
><br>
> Yes, IP Filter installed in system. Yes, I've try to build 32
bit also.<br>
> Yes, I've try to build on another system. Yes, I've try to
play with<br>
> configure option. Yes, I've try also development version
3.5.x - with<br>
> the same result.<br>
><br>
> Amos, need your help.<br>
><br>
> Thanks in advance,<br>
><br>
> WBR, Yuri<br>
><br>
>><br>
>><br>
>> _______________________________________________<br>
>> squid-users mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
>> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
><br>
><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBAgAGBQJUlCv/AAoJENNXIZxhPexGyYUH/jl6MeJZcF/Krw+nYL/okEO6
<br>
YAH0k+zk/p2uhXARenFNXpoTJkUwi1yoOFrmCgo2sgw9wmEk418OGKTii+JgDh2L
<br>
ZpI0pvGhmkX84bbFuyU4SkXRi+NZAcR0gJRfCra7itibeDvJ7DlOm2pxuteLXqdz
<br>
EduGcMI8l2jmVf6Ib3CVKfYNXPMhJiPmIkXuPCfms+T2CLFuGRvrwoM44SjKra8e
<br>
vADuIBJkUF6kg0psz3GmNQLm2NLqusB8yt7kF0/WecK5OkeIGXI5JY+jJrGkrnI1
<br>
UtRau1AsxqVz9gWsptArUwWVfBazxYZNk73/4PI5MqQTtVJ8ilOAjn1WxnImTaQ=
<br>
=PGXC
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>