200 Commits

Author SHA1 Message Date
sthen
ec6bb7d789 squid documentation generally uses the nomenclature "interception proxy"
rather than "transparent proxy"; switch the readme to match. also tweak the
wording to make it clear which firewall reals need to be on which machine
when having a router pass off http traffic to squid on a different machine
configured as an interception proxy.
2013-06-21 21:37:56 +00:00
lteo
5b3395e57b Fix incorrect path of squid.conf in pkg/README-main.
OK sthen@ (maintainer)
2013-06-21 01:54:55 +00:00
ajacoutot
25b3041f91 Unbreak after hx509 and ntlm removal from Kerberos. 2013-06-20 06:54:36 +00:00
ajacoutot
9920238d6f Unbreak with new Heimdal; get rid of self-cooked krb5-config since we
have it in base now.
2013-06-17 19:30:22 +00:00
sthen
fc39912ef2 - add patch from upstream, fixing problem with kqueue and SSL MITM
- s/transparent/intercept/ in README, as I happened to notice in a misc@
post from Rob Sheldon
2013-06-03 11:01:03 +00:00
sthen
50a80c79e5 update to squid 3.3.5 2013-05-25 12:33:05 +00:00
sthen
e429329751 Major update to Squid 3.3.4 (moving the port from the 3.2 branch to 3.3).
New features include:

- SQL Database logging helper
- Time-Quota session helper
- Custom HTTP request headers
- SSL-Bump Server First
- Server Certificate Mimic

While there, add notes to README-main about increasing the number of
file descriptors via login.conf.
2013-04-30 18:41:50 +00:00
sthen
5c7ac6266b minor update to squid 3.2.11 2013-04-30 14:05:51 +00:00
sthen
12454f4e76 update to squid-3.2.10: fixes & rolling in some patches committed upstream 2013-04-27 15:19:48 +00:00
sthen
1a7ed26e74 printf format string fix for long long time_t 2013-04-25 21:29:52 +00:00
ajacoutot
58f1a6f9f6 USE_LIBTOOL=Yes is the default now. 2013-03-21 08:45:11 +00:00
sthen
89bdb97ebe update to Squid 3.2.9, various fixes including DoS affecting 3.2.0.9 and up
(CVE-2013-1839).
2013-03-12 14:58:16 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
espie
c90669c473 fix LIB_DEPENDS for arches that need the gcc4 modules (multi-packages are
fun that way). Bump affected pkgs just in case.

problem noticed by rpe@

okay naddy@, sthen@
2013-02-24 11:18:38 +00:00
sthen
f5a323c546 Don't use ${FLAVOR:L}, we only support lower-case flavours now.
OK ajacoutot@ espie@
2013-02-09 14:49:50 +00:00
ajacoutot
e03c56c9c5 MODGCC4_VERSION default to 4.6 now. 2013-02-07 19:13:49 +00:00
sthen
9c86b4a801 bugfix update to Squid 3.2.7 including memory leak with malformed req's,
unhandled exception when using interception and peers, a division by zero
and others
2013-02-01 17:34:33 +00:00
sthen
659a53af65 build dep on libtool (for libtoolize) 2013-01-23 20:39:57 +00:00
sthen
af9d1f1acc landry@ noticed that www/squid was picking up execinfo.h in bulk causing
#ifdef'd headers to be used and dpb was junking it thus breaking the build;
fix by improving detection for backtrace_symbol_fd / libexecinfo and
explicitly using it.
2013-01-22 14:30:46 +00:00
sthen
26aa57248c bugfix update to squid-3.2.6 2013-01-09 21:41:48 +00:00
sthen
7281799b84 build with gcc 4.6 on ppc to avoid "unrecognizable insn" in src/ipc/StoreMap.cc
breakage reported by aja@
2013-01-02 12:26:58 +00:00
jasper
391025a59a mark broken on mips64 for the same reason hppa fails. 2012-12-20 21:48:41 +00:00
sthen
08607b4d02 squid 3.2.5; minor update, it just rolls in the compat/xstrerror.h diff. 2012-12-17 18:56:56 +00:00
sthen
6969f2b8b1 mark BROKEN-hppa and remove my broken attempt at fixing the broken autoconf
test for atomic ops.
2012-12-11 18:22:54 +00:00
sthen
d33bc05337 - move -ldap to a "MULTI_PACKAGES+= -ldap" within the 'if flavor !=
no_ldap' block

- squid optionally uses atomic ops if available, however in the code
it requires 4 byte operations, whereas configure only tests for int.
change configure test which may give hppa a chance to build; breakage
reported by landry
2012-12-10 21:19:41 +00:00
sthen
f973e9766c update to Squid 3.2.4 2012-12-04 10:40:19 +00:00
sthen
0bca395105 Don't allow autoconf to pick up et/com_err.h from e2fsprogs.
dpb build failure reported by naddy@
2012-12-03 23:10:37 +00:00
sthen
35ceda849c Update to Squid 3.2.3.
This is merged from work by myself and Matthias Pitzl @ genua, thanks to
Rodolfo Gouveia for testing with NTLM.

Flavours have been removed:

- the external helper programs for NTLM/LDAP are now in subpackages:
squid-ldap and squid-ntlm.

- SNMP support is built by default in Squid 3.x so this has moved
to the main package (no external dependencies for this).
2012-11-28 17:45:29 +00:00
ajacoutot
e197aaebf5 Remove -pthread patching.
from Brad
2012-08-27 06:19:48 +00:00
sthen
3e12ab7ce0 sync "SSLv2 disabled" messages with upstream's newer code, from Brad 2012-06-30 09:32:28 +00:00
sthen
2fab769828 switch compiler check to bsd.port.arch.mk / PROPERTIES, req'd by naddy@ 2012-06-22 15:43:47 +00:00
sthen
7b31b99b78 let squid handle things if SSLv2 is disabled, from Brad. 2012-06-20 08:48:27 +00:00
ajacoutot
4e6d900ce6 Extend README:
If the proxy server is running on the same subnet as the clients, the
return traffic from the proxy will go directly back to them without
ever hitting the firewall, which means the states will never get updated
and may fill-up your pflog(4) with blocked attempts. To circumvent this
the "no state" option needs to be specified for the route-to rule.

ok Brad, intput/ok sthen@ (maintainer)
2012-06-20 07:10:39 +00:00
ajacoutot
acaaa6fdba Use LOCALSTATEDIR instead of local variables. 2012-04-28 11:06:12 +00:00
ajacoutot
3f0ee525f1 Use LOCALSTATEDIR. 2012-04-28 10:51:44 +00:00
sthen
88ea72915d Change SEPARATE_BUILD=(concurrent|simple) to Yes; bsd.port.mk doesn't
make a distinction between these.  ok aja@ dcoppa@
2012-03-29 13:38:12 +00:00
sthen
916a6316d8 take maintainer 2011-09-20 19:34:59 +00:00
kili
d654307f25 Remove brad as maintainer (per his request) and bump. 2011-09-20 19:32:54 +00:00
espie
58fffade54 normalize pkgpath 2011-09-16 12:00:05 +00:00
giovanni
946085d0d3 Fix kerberos helper, spotted and fixed by Andrea Parazzini 2011-09-05 07:18:41 +00:00
ajacoutot
f982995f2b Add a consistent header that substitutes FULLPKGNAME for the READMEs.
ok jasper@ sthen@
2011-06-02 13:41:36 +00:00
sthen
17f86c3675 - reduce the default shutdown_lifetime to 20s; previously it was 30s which
is the maximum time rc.subr waits for a daemon, so usually it would end up
being forcefully killed (i.e. unclean shutdown -> cache must be rescanned
at next startup). suggested by aja@, diff from Brad.

- adjust PLIST to prevent warnings with pkg_delete -c, from aja@ ok Brad.
2011-05-30 20:56:30 +00:00
sthen
e93b9fa8f1 Add daemon_flags support to squid.rc. From Marcus MERIGHI.
ok Brad (maintainer), dcoppa@, aja@
2011-05-18 14:47:55 +00:00
sthen
c694e766cd Remove --enable-pf-transparent, it's no longer needed now that
PF supports divert-to. Pointed out by reyk on misc@. Add documentation
to README showing how to configure a transparent proxy. ok Brad.
2011-04-14 08:11:50 +00:00
sthen
16755f0be6 reset owner/group/mode before rc script; from Gleydson Soares via Brad 2011-03-27 19:38:32 +00:00
sthen
83bd326602 a couple of obvious bumps for pfioc_natlook changes
(I'll fill in any others when my grep finishes running).
2011-03-25 20:23:30 +00:00
ajacoutot
4ec44530ca Simplify after recent rc.subr change.
The framework is now stable and we will start documenting it (at last).
2010-12-27 14:50:22 +00:00
ajacoutot
b28452a489 Cope with recent rc.subr changes. 2010-12-24 10:40:04 +00:00
jasper
27b23ec6b9 style 2010-12-12 18:58:32 +00:00
dcoppa
557742f0fa I accidentally broke the ldap flavor. Mea culpa.
Pointed out by espie@
2010-11-29 23:06:39 +00:00