cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Remove --enable-pf-transparent, it's no longer needed now that

Browse Source 
PF supports divert-to. Pointed out by reyk on misc@. Add documentation
to README showing how to configure a transparent proxy. ok Brad.
This commit is contained in:
sthen 2011-04-14 08:11:50 +00:00
parent 9ba402d306
commit c694e766cd
2 changed files with 28 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
www/squid/Makefile
View File

@ -1,9 +1,9 @@
# $OpenBSD: Makefile,v 1.116 2011/03/27 19:38:32 sthen Exp $
# $OpenBSD: Makefile,v 1.117 2011/04/14 08:11:50 sthen Exp $
COMMENT= WWW and FTP proxy cache and accelerator
DISTNAME= squid-2.7.STABLE9
REVISION= 7
REVISION= 8
CATEGORIES= www
MASTER_SITES= ${HOMEPAGE}/Versions/v2/2.7/
DIST_SUBDIR= squid
@ -51,7 +51,6 @@ CONFIGURE_ARGS+=--datadir="${PREFIX}/share/squid" \
--enable-external-acl-helpers="${EXTERNAL_ACL}" \
--enable-forw-via-db \
--enable-negotiate-auth-helpers="squid_kerb_auth" \
--enable-pf-transparent \
--enable-removal-policies="lru heap" \
--enable-ssl \
--enable-storeio="${STOREIO}" \

30
www/squid/pkg/README
View File

@ -1,4 +1,4 @@
$OpenBSD: README,v 1.2 2010/12/12 18:58:32 jasper Exp $
$OpenBSD: README,v 1.3 2011/04/14 08:11:50 sthen Exp $
Running Squid on OpenBSD
========================
@ -8,11 +8,33 @@ The local (OpenBSD) differences are:
- sample configuration files are in ${TRUEPREFIX}/share/examples/squid
- error message files are in ${TRUEPREFIX}/share/squid/errors
- sample error message files are in ${TRUEPREFIX}/share/examples/squid/errors
- icons are in ${TRUEPREFIX}/share/squid/icons
- icons are in ${TRUEPREFIX}/share/squid/icons
- sample icons are in ${TRUEPREFIX}/share/examples/squid/icons
- the cache is in ${SQUIDDIR}/cache
- logs are stored in ${SQUIDDIR}/logs
- the cache is in ${SQUIDDIR}/cache
- logs are stored in ${SQUIDDIR}/logs
- the ugid squid runs as is _squid:_squid
Please remember to initialize the cache by running "squid -z" before
trying to run Squid for the first time.
Transparent Proxying with PF
----------------------------
To configure a transparent proxy, bind to a specific address in
${SYSCONFDIR}/squid/squid.conf, for example:
http_port 127.0.0.1:3127 transparent
On the machine running Squid, add a firewall rule similar to this:
pass in quick log inet proto tcp to port 80 divert-to 127.0.0.1 port 3127
If Squid is running on a machine which doesn't normally handle the
traffic (e.g. if you have a firewall and would like to divert packets
to Squid on another machine) you will also need a rule like this:
pass in quick from 10.77.3.5
pass in quick inet proto tcp to port 80 route-to (vr2 10.77.3.5)
(this example assumes Squid is running on 10.77.3.5 reachable over
the vr2 interface).