<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 23 January 2015 at 18:42, Amos Jeffries <span dir="ltr"><<a href="mailto:squid3@treenet.co.nz" target="_blank">squid3@treenet.co.nz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><span class="">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
</span><span class="">On 24/01/2015 4:29 a.m., Odhiambo Washington wrote:<br>
> On 23 January 2015 at 17:33, Amos Jeffries <<a href="mailto:squid3@treenet.co.nz">squid3@treenet.co.nz</a>><br>
> wrote:<br>
<br>
</span><snip><br>
<span class=""><br>
<br>
> And the good news is that squid-3.5.1 is now allowing client PCs to<br>
> browse. Thank you for that.<br>
><br>
<br>
</span>Horray!<br></blockquote><div><br></div><div>THANK YOU once again:)</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<span class=""><br>
> I still have issues to raise (though my small brain is now so<br>
> saturated):<br>
><br>
><br>
> Here is what I use:<br>
><br>
> ./configure --prefix=/opt/squid35 \ --enable-removal-policies="lru<br>
> heap" \ --disable-epoll \ --enable-auth \ --enable-auth-basic="DB<br>
> NCSA PAM PAM POP3 SSPI" \ --enable-external-acl-helpers="session<br>
> unix_group file_userip" \ --enable-auth-negotiate="kerberos" \<br>
> --with-pthreads \ --enable-storeio="ufs diskd rock aufs" \<br>
> --enable-delay-pools \ --enable-snmp  \ --with-openssl=/usr \<br>
> --enable-forw-via-db \ --enable-cache-digests \ --enable-wccpv2 \<br>
> --enable-follow-x-forwarded-for \ --with-large-files \<br>
> --enable-large-cache-files \ --enable-esi \ --enable-kqueue \<br>
> --enable-icap-client \ --enable-kill-parent-hack \ --enable-ssl \<br>
> --enable-leakfinder \ --enable-ssl-crtd \<br>
> --enable-url-rewrite-helpers \ --enable-xmalloc-statistics \<br>
> --enable-stacktraces \ --enable-zph-qos \ --enable-eui \<br>
> --with-nat-devpf \ --enable-pf-transparent \<br>
> --enable-ipf-transparent<br>
><br>
><br>
> It seems I have to remove --enable-ipf-transparent otherwise the<br>
> build fails. I was thinking I could have both of<br>
> --enable-ipf-transparent and --enable-ipf-transparent so that I can<br>
> be able to use either PF or IPFilter - whichever I want.<br>
><br>
><br>
> Are those two mutually exclusive?<br>
<br>
</span>Thats a maybe. The original design was to enable that, but doing so<br>
may repeat the issue you just resolved. From what I can tell those two<br>
firewalls should be okay together on FreeBSD at this point.<br>
<span class=""><br>
> When I have the two, the build fails with:<br>
><br>
> root@mail:/usr/home/wash/squid-3.5.1-20150120-r13736 # gmake Making<br>
> all in compat gmake[1]: Entering directory<br>
> '/usr/home/wash/squid-3.5.1-20150120-r13736/compat' depbase=`echo<br>
> assert.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ../libtool<br>
> --tag=CXX   --mode=compile clang++ -DHAVE_CONFIG_H -I..<br>
> -I../include -I../lib -I../src -I../include  -I/usr/include<br>
> -I/usr/include  -I../libltdl -I/usr/include<br>
> -I/usr/local/include/libxml2 -I/usr/local/include/libxml2  -Werror<br>
> -Qunused-arguments  -D_REENTRANT -g -O2  -march=native<br>
> -I/usr/local/include -MT assert.lo -MD -MP -MF $depbase.Tpo -c -o<br>
> assert.lo assert.cc &&\ mv -f $depbase.Tpo $depbase.Plo libtool:<br>
> compile:  clang++ -DHAVE_CONFIG_H -I.. -I../include -I../lib<br>
> -I../src -I../include -I/usr/include -I/usr/include -I../libltdl<br>
> -I/usr/include -I/usr/local/include/libxml2<br>
> -I/usr/local/include/libxml2 -Werror -Qunused-arguments<br>
> -D_REENTRANT -g -O2 -march=native -I/usr/local/include -MT<br>
> assert.lo -MD -MP -MF .deps/assert.Tpo -c assert.cc  -fPIC -DPIC -o<br>
> .libs/assert.o In file included from assert.cc:9: In file included<br>
> from ../include/squid.h:43: ../compat/compat.h:49:57: error:<br>
> expected value in expression #if IPF_TRANSPARENT &&<br>
> USE_SOLARIS_IPFILTER_MINOR_T_HACK ^<br>
<br>
</span>Seems to be a bug in the autoconf detections. You can workaround it<br>
for now by adding this to your option list:<br>
<br>
 CXXFLAGS="-DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0"<br>
<br>
(or if you unluckily hit build errors mentioning minor_t re-definition<br>
try setting it to =1).<br>
<span class=""><br></span></blockquote><div><br></div><div>I could be getting it all wrong, but there is where I end:</div><div></div></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">root@mail:/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736 # env</div><div class="gmail_extra"><br></div><div class="gmail_extra"><cut></div><div class="gmail_extra">CC=clang</div><div class="gmail_extra">CXX=clang++</div><div class="gmail_extra">CXXFLAGS=-DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0</div><div class="gmail_extra"></cut></div><div class="gmail_extra"><br></div><div class="gmail_extra">root@mail:/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736 # gmake</div><div class="gmail_extra">Making all in compat</div><div class="gmail_extra">gmake[1]: Entering directory '/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736/compat'</div><div class="gmail_extra">depbase=`echo assert.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\</div><div class="gmail_extra">/bin/sh ../libtool  --tag=CXX   --mode=compile clang++ -DHAVE_CONFIG_H   -I.. -I../include -I../lib -I../src -I../include  -I/usr/include  -I/usr/include  -I../libltdl -I/usr/include -I/usr/local/include/libxml2  -I/usr/local/include/libxml2  -Werror -Qunused-arguments  -D_REENTRANT -DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0 -march=native -I/usr/local/include -MT assert.lo -MD -MP -MF $depbase.Tpo -c -o assert.lo assert.cc &&\</div><div class="gmail_extra">mv -f $depbase.Tpo $depbase.Plo</div><div class="gmail_extra">libtool: compile:  clang++ -DHAVE_CONFIG_H -I.. -I../include -I../lib -I../src -I../include -I/usr/include -I/usr/include -I../libltdl -I/usr/include -I/usr/local/include/libxml2 -I/usr/local/include/libxml2 -Werror -Qunused-arguments -D_REENTRANT -DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0 -march=native -I/usr/local/include -MT assert.lo -MD -MP -MF .deps/assert.Tpo -c assert.cc  -fPIC -DPIC -o .libs/assert.o</div><div class="gmail_extra">In file included from assert.cc:9:</div><div class="gmail_extra">In file included from ../include/squid.h:12:</div><div class="gmail_extra">../include/autoconf.h:1431:9: error: 'USE_SOLARIS_IPFILTER_MINOR_T_HACK' macro redefined [-Werror]</div><div class="gmail_extra">#define USE_SOLARIS_IPFILTER_MINOR_T_HACK</div><div class="gmail_extra">        ^</div><div class="gmail_extra"><command line>:3:9: note: previous definition is here</div><div class="gmail_extra">#define USE_SOLARIS_IPFILTER_MINOR_T_HACK 0</div><div class="gmail_extra">        ^</div><div class="gmail_extra">In file included from assert.cc:9:</div><div class="gmail_extra">In file included from ../include/squid.h:43:</div><div class="gmail_extra">../compat/compat.h:49:57: error: expected value in expression</div><div class="gmail_extra">#if IPF_TRANSPARENT && USE_SOLARIS_IPFILTER_MINOR_T_HACK</div><div class="gmail_extra">                                                        ^</div><div class="gmail_extra">2 errors generated.</div><div class="gmail_extra">Makefile:921: recipe for target 'assert.lo' failed</div><div class="gmail_extra">gmake[1]: *** [assert.lo] Error 1</div><div class="gmail_extra">gmake[1]: Leaving directory '/usr/home/wash/ILI/Squid/3.5/squid-3.5.1-20150120-r13736/compat'</div><div class="gmail_extra">Makefile:567: recipe for target 'all-recursive' failed</div><div class="gmail_extra">gmake: *** [all-recursive] Error 1</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">Plus I still have to ask:</div><div class="gmail_extra"><br></div><div class="gmail_extra">--with-pf-transoparent --with-nat-devpf works now as expected.</div><div class="gmail_extra"><br></div><div class="gmail_extra">How about if I only had --enable-ipf-transparent ?? It means I would be stuck still?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Is there a workaround for IPFilter on FreeBSD not to cause the loop?</div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div class="gmail_extra"><br></div><div><br></div>-- <br><div class="gmail_signature">Best regards,<br>Odhiambo WASHINGTON,<br>Nairobi,KE<br>+254733744121/+254722743223<br>"I can't hear you -- I'm using the scrambler."<br></div>
</div></div>