[squid-users] IPv6 and TPROXY

[Walter H.]

Hello,

not really, I must live with the fact, that I can't configure tproxy, as 
I can't update any kernel ...

Walter

On 19.08.2017 22:09, Eliezer Croitoru wrote:
> Any progress with the issue?
>
> Eliezer
>
> ----
> Eliezer Croitoru
> Linux System Administrator
> Mobile: +972-5-28704261
> Email: eliezer at ngtech.co.il
>
>
>
> -----Original Message-----
> From: Walter H. [mailto:Walter.H at mathemainzel.info]
> Sent: Sunday, August 13, 2017 21:31
> To: Eliezer Croitoru<eliezer at ngtech.co.il>
> Cc: squid-users at lists.squid-cache.org
> Subject: Re: [squid-users] IPv6 and TPROXY
>
> Hello Eliezer
>
> yes, because all my Linux systems are CentOS 6 ...
>
> the router/firewall has a rule
>
> -A FORWARD -i br0 -o sit1 -s ipv6prefix:0::/80 -m tcp -p tcp --dport 80
> -j LOG --log-prefix "IPv6[FWD-HTTP(out)]: " --log-level 7
> -A FORWARD -i br0 -o sit1 -s ipv6prefix:0::/80 -m tcp -p tcp --dport 80
> -j REJECT
>
> any windows host inside this ipv6prefix has configured a proxy, but for
> some reason e.g. there is HTTP traffic of CRLs or OCSP
> that doesn't go through to the configured proxy, and is blocked ...
> for this I need this TPROXY ...
> (only IPv6 needs to be solved, IPv4 already runs perfekt)
>
> Thanks,
> Walter
>
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3491 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20170819/6c1056eb/attachment.bin>