FYI - OpenBSD 3.0 PF transparent proxy patch

Hi!

I've put a transparent proxy patch to support OpenBSD 3.0
using the new PF packet filter to:

ftp://ftp.suse.com/pub/projects/proxy-suite/patches/

9603b17ad24f61230c4ed60a6ba825ca  openbsd-3_pf.txt
7c2b25368e0fa44c9c25e9698d3b602e  openbsd-3_pf.dif


Any feedback would be very appreciated!


ftp://ftp.suse.com/pub/projects/proxy-suite/patches/openbsd-3_pf.txt:

This patch provides transparent proxy support for OpenBSD 3.0 using pf.
Many thanx to Matt Messier <[email protected]> for this!

You can apply it to proxy-suite versions 1.8, 1.8.2.2 and 1.9 using:

  cd /path/to/proxy-suite-<VERSION>
  patch -p0 < /path/to/openbsd-3_pf.dif

and go on with:

  alocal ; autoheader ; autoconf
  ./configure && gmake            # <--- GNU make

You may need autoconf-2.52 for versions > 1.8...

Matt's notes about this patch:

Date: Thu, 16 May 2002 01:31:10 -0400 (EDT)
From: Matt Messier <[email protected]>

Attached please find diffs against ftp-proxy v1.8 to support transparent
proxy on OpenBSD 3.0 using pf.  It will still not compile out of the box
due to makefile issues; however, the major problem of not being able to
get the original destination address as a result of a redirect is fixed
with these patches.

Be advised that the patches are not extensively tested.  I've just quickly
whipped them up and they are working for me.  I was unable to find any
documentation on the pf interface from a programmer's point of view, so
the changes are the result of reading the kernel and pfctl code and trial
and error.  Please feel free to do with these patches as you like.  I only
ask that if you do choose to include them in the distribution that you let
me know what version they will appear in.

Thanks!


With "makefile issues" Matt means the requirement of GNU make :-)

Bye,
 Marius.
--
 ° --- Marius Tomaschewski <[email protected]>, Germany --- °
   The number of UNIX installations has grown to 10, with
   more expected.
   - The Unix Programmer's Manual, 2nd Edition, June 1972

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]