Gud day to everyone! I would like to ask you guys for help. I was installing squid2.6STABLE17 on my fc6 box. I wanted my proxy server to be transparent when i redirect packets from my packet filter firewall and at the same time allow ping requests, so I inputted the following on configure:

./configure --enable-pf-transparent --enable-icmp --prefix=/etc/squid

And so I make the file and then did make install. A floury of messages appeared and then suddenly, it stopped and an error appeared. It was something like "No headers for packet filter found, this option will not be enabled". However, squid performed just fine but its still not transparent.

How can I change my squid.conf to make it transparent and allow ping to run through it. Thanx guys!

You need to install the kernel sources that include the missing kernel headers.
To configure squid 2.6 as a transparent proxy you need just the following line in squid.conf
For more details
read this (the part for 2.6 version).

thank you for replying to my post.

I did this on my packet filter firewall:

rdr on $internal proto {tcp,udp} from any to port {80,81} -> $proxy_server port 3128


but still, it doesn't work.


So, do i have to reinstall squid again and specify the header file for me to be able to make it transparent?

You must first install the kernel sources for your exact kernel version. It's in the installation CD of your distro.
Then to build squid again, you run:

thanx man! I really appreciate your help!

my server just got doped the other day, it wasn't blocking the sites i indicated on the squid.conf. so i finally gave up and reinstalled the whole fc6 + squid2.6. but another problem went up. i tried using yum install squid but i wasnt able to start squid it always fails. then i tried another approach w/c was the make install but i can't start squid properly even though i did an /usr/local/squid/sbin/squid -NCd1 on it and reported : "Ready to accept connections" (it should be fine right?) yet my clients can't connect to it.

i really need your professional help, thanks!

as a side note, i already gave ownership on its directories. i have really no idea as to why this is happenning.

. Make sure that squid is running and it's listening on the port your clients use to connect:

this was what i saw:

tcp 0 0 *:webcache *:* LISTEN 10002/(squid)


is this it???

Yes, that means that squid is up and running. I am not sure what port webcache is, but you can find it running:
and see if this is the port your clients are trying to connect.

no, its not because i'm using the default port which is 3128.

You should edit squid.conf and change the port to the one that your clients use to connect.