From: Amos Jeffries <squid3@treenet.co.nz>
Date: Sat, 5 Sep 2009 01:21:40 +0000 (+1200)
Subject: Partially enable IPv6 TPROXY support.
X-Git-Tag: SQUID_3_2_0_1~739
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=382481f7a1340e0647a8defdc6f984d6041ed6ea;p=thirdparty%2Fsquid.git

Partially enable IPv6 TPROXY support.

Balabit are now providing patches to do TPROXY with IPv6.

This retains the v4-only behaviour of the wildcard and IPv4 adresses
until full kernel support is available  but enables people who have
patched their kernels to set an IPv6 in the http_port.
---

diff --git a/src/cache_cf.cc b/src/cache_cf.cc
index b6ba86a453..c4e58b6b0e 100644
--- a/src/cache_cf.cc
+++ b/src/cache_cf.cc
@@ -3088,14 +3088,13 @@ parse_http_port_option(http_port_list * s, char *token)
         IpInterceptor.StartTransparency();
         /* Log information regarding the port modes under transparency. */
         debugs(3, DBG_IMPORTANT, "Starting IP Spoofing on port " << s->s);
-        debugs(3, DBG_IMPORTANT, "Disabling Authentication on port " << s->s << " (Ip spoofing enabled)");
+        debugs(3, DBG_IMPORTANT, "Disabling Authentication on port " << s->s << " (IP spoofing enabled)");
 
 #if USE_IPV6
         /* INET6: until target TPROXY is known to work on IPv6 SOCKET, force wildcard to IPv4 */
         debugs(3, DBG_IMPORTANT, "Disabling IPv6 on port " << s->s << " (interception enabled)");
         if ( s->s.IsIPv6() && !s->s.SetIPv4() ) {
-            debugs(3, DBG_CRITICAL, "http(s)_port: IPv6 addresses cannot be transparent (protocol does not provide NAT)" << s->s );
-            self_destruct();
+            debugs(3, DBG_CRITICAL, "http(s)_port: TPROXY enabled on IPv6 port " << s->s << ". Assuming you patched your kernel...");
         }
 #endif