]> git.ipfire.org Git - thirdparty/squid.git/commit
Add TPROXY support for OpenBSD, FreeBSD, NetBSD
authorMarios Makassikis <mmakassikis@gmail.com>
Tue, 2 Apr 2013 04:07:35 +0000 (22:07 -0600)
committerAmos Jeffries <squid3@treenet.co.nz>
Tue, 2 Apr 2013 04:07:35 +0000 (22:07 -0600)
commit83bc5256edbdfb17c72c835236b83ebf23637077
treee49f7ba50986854f5257ced032710ab8c549059c
parent93d4da8778725894b75108655915ff76283a658f
Add TPROXY support for OpenBSD, FreeBSD, NetBSD

This adds support for the PF 'divert-to' target which presents the
client and remote IPs directly to Squid in accept() parameters the
way Linux TPROXY target does.

It also adds support for the SO_BINDANY option on outgoing traffic for
client IP address spoofing which completes the TPROXY behaviour.

To enable these features Squid built with --enable-pf-transparent can
be configured with:
  http_port 1234 tproxy
src/comm.cc
src/ip/Intercept.cc
src/ip/Intercept.h