Re: IP-Filter

A WCCP enabled cache can be on any address, and the cache server OS must
redirect any packets port 80 received via GRE to the proxy port on the
proxy address.

To make Linux receive the GRE encapsulated packets you must use the
ip_wccp or modified ip_gre module.

To make Linux redirect the received (after decapsulation) packets to the
proxy software you should use ipchains with a redirect rule.

--
Henrik Nordstrom
Squid hacker
kiran@mail.pol.net.in wrote:
> 
> Thanks! Now it compiled without giving any problem. As wccp listen on
> 2048 and http listen on 3128, is it not necessary to redirect that
> packets.
> 
> I am not using ip_gre.
> 
> For implementing wccp cache should be on same network address or is it
> possible to implement in different network address.
> 
> Kiran
> 
> On Sun, 2 Jul 2000, Henrik Nordstrom wrote:
> 
> > --enable-ipf is only for when you use IP-Filter without getsocksname()
> > support.
> >
> > It is not needed on Linux with ipchains, or any other redirection method
> > which supports getsockname().
> >
> > --
> > Henrik Nordstrom
> > Squid hacker
> >
> >
> > kiran@mail.pol.net.in wrote:
> > >
> > > Hi,
> > >
> > > I am trying to implement transparent proxy using squid-2.3 in Redhat Linux
> > > 6.2, when I execute the configure with proxy and wccp enabling it is
> > > giving the following warning..
> > >
> > > WARNING: Cannot find necessary IP-Filter header files
> > >          Transparent Proxy support WILL NOT be enabled
> > >
> > > I am using Redhat Linux with ipchains. (IP-Filter is not directly
> > > supported on linux with glibc)
> > >
> > > Any help to override this problem...
> > >
> > > kiran
> >
> >