From owner-freebsd-ports@freebsd.org Mon Apr 25 22:32:25 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 60FE5B1C1C7 for ; Mon, 25 Apr 2016 22:32:25 +0000 (UTC) (envelope-from ncrogers@gmail.com) Received: from mail-ob0-x22e.google.com (mail-ob0-x22e.google.com [IPv6:2607:f8b0:4003:c01::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2A2BE1275 for ; Mon, 25 Apr 2016 22:32:25 +0000 (UTC) (envelope-from ncrogers@gmail.com) Received: by mail-ob0-x22e.google.com with SMTP id j9so88863273obd.3 for ; Mon, 25 Apr 2016 15:32:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to; bh=BYLqUUIMOFuj6Y1xPlkRbzvarYiq0lLeFC9TUn1chfs=; b=LU7N+E0TzhTUu9RsyJeu549S0OW0uOe11Jm50uITIV0kJSdsy2f149aItmKH6xIu/E yRamRQJkXNIa9GRW/2yzjElr6oHzyb5tedXI2Hy14oOBfDKkA+cxS6Rg6qoc9w7lEkIu cCDDv3knsTvHBiZdm09Jw/2TBnPYeQG+x+I4z40EOj8H0QGwTehvT7kb68RkzUQ8HDuc 25vQBUYU1hLevC7BBQkxX58twU97FSCqHVy95xOWpjJrDqYd+8TZae4kfNjjfNpYTJhc 1JpE6T4skaHpjoxy4DYbSdEnhx0cgevy4Vkh4ihqBO94pRvfB5KaTSFWdGQQd9fVy3tp NQ7A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=BYLqUUIMOFuj6Y1xPlkRbzvarYiq0lLeFC9TUn1chfs=; b=FHOHhuXoa9Ty011OCH8WXvdTyMRlpdBjjPEd4JKGxVifrY0ling3rY9bilbw0HgsF/ zmKKmGtMf1yYMI8nvi/F9itFSubDtWvTMAFP0sCN+ibSNMY3Xtvwv1iNuSVkG+ZJ+96K Z7PL+oRkmJnYQAPBQnChwC7A4/DAZIFam858tgmVf+ARQMa78WuxyVj1lDSdKsHRM3sC DzUyecu9zx/hfTWDnagkHAdkNt3mvqCK5t5fvQpG9izNbE+EZmVzKzqxQlctKBXstHJ4 8/NhkfPy8hFEKIBtvkLS9JaeMhXekOA178vzN72VYwt0XRfvmMPicrXCMOKqI9GfNHPT 3XaA== X-Gm-Message-State: AOPr4FWR5aPSvAiy8lYd3cx5ExyDWKPm91YdaxE3cw1f5LBN2/y7T4MKlsMuFksQgK/lbkyH2yz79OrSp5Tijg== MIME-Version: 1.0 X-Received: by 10.60.62.6 with SMTP id u6mr16616368oer.35.1461623544458; Mon, 25 Apr 2016 15:32:24 -0700 (PDT) Received: by 10.202.242.132 with HTTP; Mon, 25 Apr 2016 15:32:24 -0700 (PDT) Date: Mon, 25 Apr 2016 15:32:24 -0700 Message-ID: Subject: www/squid: reconsider enabling all options From: Nick Rogers To: "freebsd-ports@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.21 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Apr 2016 22:32:25 -0000 Hello, I just recompiled my www/squid port to the latest 3.5.17 version. Prior to this I was running 3.5.14. I immediately noticed that my transparent proxy setup via PF was broken and throwing a "Forwarding loop detected" error in the logs. I then noticed the following recent commit which enables all options/knobs that do not require dependencies: https://svnweb.freebsd.org/ports?view=revision&revision=412287 This change enables the ipf-transparent (TP_IP), ipfw-transparent (TP_IPF), and pf-transparent (TP_PF) options at the same time, and turned out to be the root of my "redirection loop" problem. I am unclear why, but in my experience these options have always been incompatible with each other, which is why in previous versions of the www/squid port and its prior iterations these knobs have always been disabled by default. I've always explicitly enabled TP_PF in my make.conf. I was able to fix my issue by recompiling without the TP_IP and TP_IPF options, but I believe more thought/discussion should be given to all the new options that are now enabled by default in the port. Thanks! -Nick