Re: [squid-users] squid clientside_mark problem

2018-10-17 Thread morteza omidian
HiTank you for your reply.I compiled Squid 4 with these Options and it works!:./configure \ --enable-linux-netfilter \ --with-netfilter-conntrack Tanx. On Wednesday, October 17, 2018 6:31 AM, Amos Jeffries wrote: On 16/10/18 8:06 PM, morteza omidian wrote: > Hi >

[squid-users] acl "clientside_mark" problem

2018-10-16 Thread morteza omidian
Hi why anybody don't answer me? Please help! I compiled Squid 4.3 with this options in linux server: ./configure   --enable-linux-netfilter  --enable-zph-qos when i change my squid configuration file and add this line "acl MY_CLIENTs clientside_mark 0x1" I got  error messages

Re: [squid-users] squid clientside_mark problem

2018-10-16 Thread morteza omidian
Hi Witch options do i have to compile with to enable "clientside_mark"?? tank On Sunday, October 14, 2018, 6:48:00 PM GMT+3:30, morteza omidian wrote: Hi I installed squid4.3 in my linux OS, when I configure squid with clientside_mark i get an error tells me this is not

[squid-users] squid clientside_mark problem

2018-10-14 Thread morteza omidian
HiI installed squid4.3 in my linux OS,when I configure squid with clientside_mark i get an error tells me this is not possible!!I use this page-line75 as guidance for my configuration!! My configuration is:acl MY_ACL clientside_mark 0x1 tcp_outgoing_mark 0x20 MY_ACL What is wrong??

Re: [squid-users] squid and iptables

2018-10-13 Thread morteza omidian
3:30, Amos Jeffries wrote: On 13/10/18 6:08 PM, morteza omidian wrote: > tanx again. > Ok, if I want to know connmark of packets and connection in squid and > then select them with an ACL inside of squid  and then again mark them > with "tcp_outgoing_mark", is that possible?

Re: [squid-users] squid and iptables

2018-10-12 Thread morteza omidian
nts source ip addresses or domain and ..., not connmark! On Saturday, October 13, 2018, 5:47:49 AM GMT+3:30, Amos Jeffries wrote: On 13/10/18 5:13 AM, morteza omidian wrote: > > Tank you, I see it now. > It does not help me, I want to have an acl to select traffic (HTTP > t

Re: [squid-users] squid and iptables

2018-10-12 Thread morteza omidian
:30, Antony Stone wrote: On Friday 12 October 2018 at 16:41:44, morteza omidian wrote: > HiI asked my question before.It seems that anybody can not answer it!! Did you miss the response from Amos? http://lists.squid-cache.org/pipermail/squid-users/2018-October/019389.html > As yo

[squid-users] squid and iptables

2018-10-12 Thread morteza omidian
HiI asked my question before.It seems that anybody can not answer it!! As you know, we can mark packets when they go out of squid with "tcp_outgoing_mark", this mark is based on Source IP or Source MAC of client, but i want to mark them based on mark of input packet, something like this: In

[squid-users] netfilter mark and squid

2018-10-08 Thread morteza omidian
HiIs it possible to create an acl based on netfilter mark in squid??for example:acl My_client NFMARK 0x1tcp_outgoing_mark 0x1 My_client I want to somehow know my source interface after new packet go out from squid to server. I want to keep clients packets mark after packets go out to the server!

[squid-users] Netfilter Mark

2018-10-08 Thread morteza omidian
HiIs it possible to create an acl based on netfilter mark in squid??for example:acl My_client NFMARK 0x1tcp_outgoing_mark 0x1 My_client I want to keep clients packets mark after packets go out to the server! tanx ___ squid-users mailing list

[squid-users] change packet flow to have transparent squid proxy

2018-09-14 Thread morteza omidian
Hi I am in a dire need about using squid in my Linux iptables firewall as a transparent proxy. In my linux iptables firewall i want to do iptables rules and controls in forward chain and after that do http filtering with squid, because of that i need to change netfilter packet flow and send