Partially enable IPv6 TPROXY support.

Balabit are now providing patches to do TPROXY with IPv6.

This retains the v4-only behaviour of the wildcard and IPv4 adresses
until full kernel support is available  but enables people who have
patched their kernels to set an IPv6 in the http_port.

diff --git a/src/cache_cf.cc b/src/cache_cf.cc
index b6ba86a453c975fae1dd4aaca8c879cac468cc90..c4e58b6b0ebb09ac772a4063a4bda4562195fd1b 100644 (file)
--- a/src/cache_cf.cc
+++ b/src/cache_cf.cc
@@ -3088,14 +3088,13 @@ parse_http_port_option(http_port_list * s, char *token)
         IpInterceptor.StartTransparency();
         /* Log information regarding the port modes under transparency. */
         debugs(3, DBG_IMPORTANT, "Starting IP Spoofing on port " << s->s);
-        debugs(3, DBG_IMPORTANT, "Disabling Authentication on port " << s->s << " (Ip spoofing enabled)");
+        debugs(3, DBG_IMPORTANT, "Disabling Authentication on port " << s->s << " (IP spoofing enabled)");
 
 #if USE_IPV6
         /* INET6: until target TPROXY is known to work on IPv6 SOCKET, force wildcard to IPv4 */
         debugs(3, DBG_IMPORTANT, "Disabling IPv6 on port " << s->s << " (interception enabled)");
         if ( s->s.IsIPv6() && !s->s.SetIPv4() ) {
-            debugs(3, DBG_CRITICAL, "http(s)_port: IPv6 addresses cannot be transparent (protocol does not provide NAT)" << s->s );
-            self_destruct();
+            debugs(3, DBG_CRITICAL, "http(s)_port: TPROXY enabled on IPv6 port " << s->s << ". Assuming you patched your kernel...");
         }
 #endif