[squid-users] Squid versions and FreeBSD-10.1 headache

[Amos Jeffries]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 24/01/2015 4:29 a.m., Odhiambo Washington wrote:
> On 23 January 2015 at 17:33, Amos Jeffries <squid3 at treenet.co.nz>
> wrote:

<snip>


> And the good news is that squid-3.5.1 is now allowing client PCs to
> browse. Thank you for that.
> 

Horray!

> I still have issues to raise (though my small brain is now so
> saturated):
> 
> 
> Here is what I use:
> 
> ./configure --prefix=/opt/squid35 \ --enable-removal-policies="lru
> heap" \ --disable-epoll \ --enable-auth \ --enable-auth-basic="DB
> NCSA PAM PAM POP3 SSPI" \ --enable-external-acl-helpers="session
> unix_group file_userip" \ --enable-auth-negotiate="kerberos" \ 
> --with-pthreads \ --enable-storeio="ufs diskd rock aufs" \ 
> --enable-delay-pools \ --enable-snmp  \ --with-openssl=/usr \ 
> --enable-forw-via-db \ --enable-cache-digests \ --enable-wccpv2 \ 
> --enable-follow-x-forwarded-for \ --with-large-files \ 
> --enable-large-cache-files \ --enable-esi \ --enable-kqueue \ 
> --enable-icap-client \ --enable-kill-parent-hack \ --enable-ssl \ 
> --enable-leakfinder \ --enable-ssl-crtd \ 
> --enable-url-rewrite-helpers \ --enable-xmalloc-statistics \ 
> --enable-stacktraces \ --enable-zph-qos \ --enable-eui \ 
> --with-nat-devpf \ --enable-pf-transparent \ 
> --enable-ipf-transparent
> 
> 
> It seems I have to remove --enable-ipf-transparent otherwise the
> build fails. I was thinking I could have both of
> --enable-ipf-transparent and --enable-ipf-transparent so that I can
> be able to use either PF or IPFilter - whichever I want.
> 
> 
> Are those two mutually exclusive?

Thats a maybe. The original design was to enable that, but doing so
may repeat the issue you just resolved. From what I can tell those two
firewalls should be okay together on FreeBSD at this point.

> When I have the two, the build fails with:
> 
> root at mail:/usr/home/wash/squid-3.5.1-20150120-r13736 # gmake Making
> all in compat gmake[1]: Entering directory 
> '/usr/home/wash/squid-3.5.1-20150120-r13736/compat' depbase=`echo
> assert.lo | sed 's|[^/]*$|.deps/&|;s|\.lo$||'`;\ /bin/sh ../libtool
> --tag=CXX   --mode=compile clang++ -DHAVE_CONFIG_H -I..
> -I../include -I../lib -I../src -I../include  -I/usr/include 
> -I/usr/include  -I../libltdl -I/usr/include
> -I/usr/local/include/libxml2 -I/usr/local/include/libxml2  -Werror
> -Qunused-arguments  -D_REENTRANT -g -O2  -march=native
> -I/usr/local/include -MT assert.lo -MD -MP -MF $depbase.Tpo -c -o
> assert.lo assert.cc &&\ mv -f $depbase.Tpo $depbase.Plo libtool:
> compile:  clang++ -DHAVE_CONFIG_H -I.. -I../include -I../lib 
> -I../src -I../include -I/usr/include -I/usr/include -I../libltdl 
> -I/usr/include -I/usr/local/include/libxml2
> -I/usr/local/include/libxml2 -Werror -Qunused-arguments
> -D_REENTRANT -g -O2 -march=native -I/usr/local/include -MT
> assert.lo -MD -MP -MF .deps/assert.Tpo -c assert.cc  -fPIC -DPIC -o
> .libs/assert.o In file included from assert.cc:9: In file included
> from ../include/squid.h:43: ../compat/compat.h:49:57: error:
> expected value in expression #if IPF_TRANSPARENT &&
> USE_SOLARIS_IPFILTER_MINOR_T_HACK ^

Seems to be a bug in the autoconf detections. You can workaround it
for now by adding this to your option list:

 CXXFLAGS="-DUSE_SOLARIS_IPFILTER_MINOR_T_HACK=0"

(or if you unluckily hit build errors mentioning minor_t re-definition
try setting it to =1).

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUwmv8AAoJELJo5wb/XPRjX3UH/1/8Mq1tFumUOpb7xXSKp6qA
LFcVZt0GX7rn2Z+fBuhVcsSkAHiqZZdn1+FRyuqYhYHeu5Y5tuc6urnLV0y9sSES
+onx2xgteNH9P/QV/JFYSIYJzp2rzAs+oPHlJJCHslNUG8nF3Dmp01Wiajc+ANOG
42PJc3FhnzJeCOQtr3wS8QPeLRjOCEXLzjd8rhl/e+MHqIi3ZrTHN8c+W0YUXMdH
bc6HtMHRsfOOj3s1Bu2v/VSCsU1TJJgLJK50GoPZFiaHQyCV8SjgF85AfjYFjnh/
4WxOYEX2R6FFONtbGHz81do4I1+JmXgHgTotIcha0fAWgpJxb506ERnUDC52iOY=
=1gna
-----END PGP SIGNATURE-----