[SQU] Problem With yahoomail

Hello every one
i am running squid2.2s5 on a redhat 6.0 box my problem
is that sometimes my clients are unable to access
yahoomail and then all of a sudden everything becomes
just fine
i have checked other mail sites as well but they work
just fine.
Any ideas
p.s) I have activated that cgi-bin ? stoplist as well
Hilal Afridi

--- squid-users-digest-request@ircache.net wrote:

> ATTACHMENT part 1 message/rfc822
>
> squid-users-digest Digest Volume 00 : Issue 661
>
> Today's Topics:
> Re: [SQU] More on WCCP and truncated [ "Wayne
> Smith" <wcsmith@myrealbox.co ]
> Re: [SQU] Multiple Redirectors [ "Jason
> Thompson" <jthompso@aghs.lee ]
> [SQU] Monitoring net access [ "Jason
> Thompson" <jthompso@aghs.lee ]
> Re: [SQU] Monitoring net access [ Andrew
> Veitch <andrew.veitch@man.ac ]
> RE: [SQU] Monitoring net access [ "Miroslav
> PRAGL" <Miroslav.Pragl@Om ]
> Re: [SQU] FTP icons broken in 2.3.ST [ Xwindows
> User <xwindowuser@discflo. ]
> Re: [SQU] FTP icons broken in 2.3.ST [ Duane
> Wessels <wessels@squid-cache. ]
> Re: [SQU] FTP icons broken in 2.3.ST [ Alexander
> Javoronkov <nmi@mtv.ru> ]
> Re: [SQU] FTP icons broken in 2.3.ST [ Alexander
> Javoronkov <nmi@mtv.ru> ]
> RE: session based transaction and sq [
> "Venkataraman, Radha" <radha.venkat ]
> Re: session based transaction and sq [ "Robert
> Collins" <robert.collins@it ]
> Re: [SQU] Are there any squid device [ "Robert
> Collins" <robert.collins@it ]
> Re: [SQU] More on WCCP and truncated [ Lincoln
> Dale <ltd@cisco.com> ]
> Re: [SQU] More on WCCP and truncated [ Lincoln
> Dale <ltd@cisco.com> ]
>

> ATTACHMENT part 2 message/rfc822
> Date: Thu, 14 Dec 2000 10:36:10 -0500
> From: "Wayne Smith" <wcsmith@myrealbox.com>
> To: "Dan Williamson" <danw@norcomcable.ca>,
> "Nathan Lewis" <nathan_lewis@uclid.com>
> CC: <squid-users@ircache.net>
> Subject: Re: [SQU] More on WCCP and truncated GRE
> packets. --HELP
>
> Cisco hardware has multiple switching paths that can
> be used for packet
> forwarding (process switching, fast switching, Cisco
> Express Forwarding
> (CEF), distributed CEF (dCEF), etc.
>
> Certain versions of the IOS have certain
> functionality in some paths and not
> in others. In some releases of the IOS, WCCP wasn't
> supported in the CEF
> path, and with CEF turned on, the WCCP portion of
> life never saw the
> packets.
>
> This isn't likely to be your case, as you are
> actually seeing packets (okay,
> portions of packets ;).
>
> ***********************************
> Wayne Smith, CNE/MCSE/CCNP/CCDP
> Computer Resources (http://www.cros.net)
>
> ----- Original Message -----
> From: "Nathan Lewis" <nathan_lewis@uclid.com>
> To: "Dan Williamson" <danw@norcomcable.ca>
> Cc: <squid-users@ircache.net>
> Sent: Wednesday, December 13, 2000 7:20 PM
> Subject: RE: [SQU] More on WCCP and truncated GRE
> packets. --HELP
>
>
> > Thanks. I will look into that option. Anybody
> off-hand know what this
> does?
> >
> > At 06:16 PM 12/13/00 -0600, Dan Williamson wrote:
> > >I seriously doubt this will help. But I will
> throw in my 2 cents anyways
> > >since I had a heck of a time getting WCCP to work
> in my system. I to got
> > >some help from the group, especially Lincoln.
> > >I am running 12.1.3 on my router. I fought with
> it for sometime, I then
> > >stumbled onto turning IP CEF on Globally. Then I
> turned it off on my
> client
> > >side interface.
> > >no ip route-cache cef
> > >I don't know why it worked, but I'm just glad
> that it did.
> > >
> > >Like I say, doubt it will help, but it did work
> for me.
> > >
> > >Regards,
> > >
> > >Dan
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 3 message/rfc822
> Date: Thu, 14 Dec 2000 16:03:38 -0000
> From: "Jason Thompson" <jthompso@aghs.leeds.sch.uk>
> To: "Squid" <squid-users@ircache.net>
> Subject: Re: [SQU] Multiple Redirectors
>
> Hi,
>
> Thank you to all for your help. I think I have this
> sorted now.
>
> Cheers
>
> J.Thompson
>
> ----- Original Message -----
> From: "Cord Beermann" <squid@cord.de>
> To: "Squid" <squid-users@ircache.net>
> Sent: Friday, December 08, 2000 12:12 PM
> Subject: Re: [SQU] Multiple Redirectors
>
>
> > Hallo! Du (Jason Thompson) hast geschrieben:
> >
> > >I am in the process of setting up a redirector
> that blocks access to chat
> sites. Additionally I would like to be able to block
> advertisements.
> > >I have found 2 redirectors which will do this for
> me very well but as far
> as I know Squid does not support 2 redirectors as
> standard.
> > >
> > >Is there a script or software available which
> will allow 2 or more
> redirectors to be used?
> >
> > besides performance issues this should work:
> >
> > #!/bin/sh
> >
> > /path/to/redirector1 |/path/to/redirector2
> >
> > use this script as your redirector.
> >
> > Cord
> > --
> > echo
> 'kfabj?%abgerrf?%fabjsynxrf?1000?%fp?lryybj?&'|
> > tr '?n-z$N-Z&a-m!A-M^%' ' a-m~A-M.n-z<N-Z@-'|
> > $(echo 'Plattfisch'|tr -d 'Packetlift')&&echo
> D$(echo Leitplanke|
> > sed -e 's/.\{6\}//')||echo 'oops.'
> >
> > --
> > To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 4 message/rfc822
> Date: Thu, 14 Dec 2000 16:02:53 -0000
> From: "Jason Thompson" <jthompso@aghs.leeds.sch.uk>
> To: "Squid" <squid-users@ircache.net>
> Subject: [SQU] Monitoring net access
>
> Hi All,
>
> Is there a way of being able to monitor what people
> are accessing on the Internet in realtime? maybe
> someone has written a program for this?
>
> Thanks in advance
>
> J.Thompson
> Allerton Grange School
>

> ATTACHMENT part 5 message/rfc822
> Date: Thu, 14 Dec 2000 16:20:13 +0000
> From: Andrew Veitch <andrew.veitch@man.ac.uk>
> To: "Jason Thompson" <jthompso@aghs.leeds.sch.uk>
> CC: "Squid" <squid-users@ircache.net>
> Subject: Re: [SQU] Monitoring net access
>
> Hi,
>
> On Thu, 14 Dec 2000, Jason Thompson wrote:
> > Is there a way of being able to monitor what
> people are accessing on the
> > Internet in realtime? maybe someone has written a
> program for this?
>
> $ tail -f /var/log/squid/access.log
>
> or if you're interested in a particular type of
> thing (e.g. .html pages)
>
> $ tail -f /var/log/squid/access.log | grep .htm
> (.htm because this gets .html as well)
>
> would work :-)
>
> Regards,
>
> --
> Andrew Veitch, National & Local Web Cache Support
> andrew.veitch@man.ac.uk
> Manchester Computing, University of Manchester
> http://wwwcache.ja.net/
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 6 message/rfc822
> Date: Thu, 14 Dec 2000 17:35:25 +0100
> From: "Miroslav PRAGL"
> <Miroslav.Pragl@Omega-Optix.Cz>
> To: "'Jason Thompson'" <jthompso@aghs.leeds.sch.uk>,
> "'Squid'" <squid-users@ircache.net>
> Subject: RE: [SQU] Monitoring net access
>
> I think this is not possible as http is state-free
> protocol. Maybe creating
> some time window floating over requests?
> Personally, i use:
> $ tail -f /var/log/squid/access.log
>
> Miroslav
>
> P.S. Please don't use html format, it's hard to
> quote and sometimes not even
> worth bothering to reply to.
>
> >Is there a way of being able to monitor what people
> are accessing on the
> Internet in realtime? maybe someone
> >has written a program for this?
>
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 7 message/rfc822
> Date: Thu, 14 Dec 2000 09:28:53 -0800
> From: Xwindows User <xwindowuser@discflo.com>
> To: Alexander Javoronkov <nmi@mtv.ru>
> CC: squid-users@ircache.net
> Subject: Re: [SQU] FTP icons broken in 2.3.STABLE4
>
> what I did was what someone else told me, I went
> back to the site and
> downloaded the daily tarball with the date in the
> name, very last, very
> bottom most tarball......uninstalled the old squid,
> installed the new
> squid. what I have figured out is this: if I use
> squid and only squid as
> a caching server, with my default gateway setup
> pointing to that squid
> box I see the ftp icons. if I have my default
> gateway pointing at
> something else, I don't see them, nor will I get
> into any ftp sites via
> http. I will only get errors........HTH
>
>
> Alexander Javoronkov wrote:
> >
> > I've seen the messages that other people posted on
> this problem. There
> > were no suggestions that helped me. The cache
> still doesn't want to let
> > me access internal ftp icons. First of all, it
> says that access to icons
> > is denied ('cause port 3128 is missing from my
> Safe_Ports). After the
> > port is added to S_P, cache outputs the following
> page:
> >
> > ERROR, could not be retrieved, GET
> > /squid-internal-static/icons/anthony-dir.gif
> HTTP/1.0,..., Host:
> > my.fqdn.hostname:3128 -> Invalid request.
> >
> > cache.log shows "internalStart: unknown request:".
> >
> > Can anybody help me ?
> >
> > --
> > To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 8 message/rfc822
> Date: Thu, 14 Dec 2000 11:31:00 -0700 (MST)
> From: Duane Wessels <wessels@squid-cache.org>
> To: Alexander Javoronkov <nmi@mtv.ru>
> CC: squid-users@ircache.net
> Subject: Re: [SQU] FTP icons broken in 2.3.STABLE4
>
> On Thu, 14 Dec 2000, Alexander Javoronkov wrote:
>
> > I've seen the messages that other people posted on
> this problem. There
> > were no suggestions that helped me. The cache
> still doesn't want to let
> > me access internal ftp icons. First of all, it
> says that access to icons
> > is denied ('cause port 3128 is missing from my
> Safe_Ports). After the
> > port is added to S_P, cache outputs the following
> page:
> >
> > ERROR, could not be retrieved, GET
> > /squid-internal-static/icons/anthony-dir.gif
> HTTP/1.0,..., Host:
> > my.fqdn.hostname:3128 -> Invalid request.
> >
> > cache.log shows "internalStart: unknown request:".
>
> Most likely this means that your squid cache doesn't
> know that
> its hostname is "my.fqdn.hostname". It can happen
> when you
> have multiple names for the host.
>
> If you have a recent version, you can use the
> 'hostname_aliases' option
> in squid.conf to tell squid about all the names it
> is called.
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 9 message/rfc822
> Date: Thu, 14 Dec 2000 21:37:07 +0300
> From: Alexander Javoronkov <nmi@mtv.ru>
> To: Duane Wessels <wessels@squid-cache.org>
> CC: squid-users@ircache.net
> Subject: Re: [SQU] FTP icons broken in 2.3.STABLE4
>
> > > I've seen the messages that other people posted
> on this problem. There
> > > were no suggestions that helped me. The cache
> still doesn't want to let
> > > me access internal ftp icons. First of all, it
> says that access to icons
> > > is denied ('cause port 3128 is missing from my
> Safe_Ports). After the
> > > port is added to S_P, cache outputs the
> following page:
> > >
> > > ERROR, could not be retrieved, GET
> > > /squid-internal-static/icons/anthony-dir.gif
> HTTP/1.0,..., Host:
> > > my.fqdn.hostname:3128 -> Invalid request.
> > >
> > > cache.log shows "internalStart: unknown
> request:".
> >
> > Most likely this means that your squid cache
> doesn't know that
> > its hostname is "my.fqdn.hostname". It can happen
> when you
> > have multiple names for the host.
> >
> > If you have a recent version, you can use the
> 'hostname_aliases' option
> > in squid.conf to tell squid about all the names it
> is called.
> I've included the 2nd hostname in the config file
> with hostname_aliases.
> It's the same hostname that is shown in the
> 'location' bar of my browser
> when I try to open broken image in the separate
> window. Same effect -
> Invalid request.
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 10 message/rfc822
> Date: Thu, 14 Dec 2000 21:40:19 +0300
> From: Alexander Javoronkov <nmi@mtv.ru>
> To: Xwindows User <xwindowuser@discflo.com>
> CC: squid-users@ircache.net
> Subject: Re: [SQU] FTP icons broken in 2.3.STABLE4
>
> > what I did was what someone else told me, I went
> back to the site and
> > downloaded the daily tarball with the date in the
> name, very last, very
> > bottom most tarball......uninstalled the old
> squid, installed the new
> > squid. what I have figured out is this: if I use
> squid and only squid as
> > a caching server, with my default gateway setup
> pointing to that squid
> > box I see the ftp icons. if I have my default
> gateway pointing at
> > something else, I don't see them, nor will I get
> into any ftp sites via
> > http. I will only get errors........HTH
> I've got latest (hope so) squid installed on new
> server. My squid cache
> resides on the same server that clients refer to as
> default gateway (I
> mean IPv4 protocol).
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 11 message/rfc822
> Date: Thu, 14 Dec 2000 10:59:34 -0800
> From: "Venkataraman, Radha"
> <radha.venkataraman@intel.com>
> To: "'squid-users@ircache.net'"
> <squid-users@ircache.net>
> Subject: RE: session based transaction and squid
> round-robin
>
> > Hi,
> >
> > We have stumbled into more than one web site
> implementing Session Based
> > Transaction on top of Stateless HTTP connections.
> Browser makes the first
> > request for a web page using GET method. Based on
> the initial page
> > request's client IP, server sends out a custom web
> page containing a
> > hidden field.. Then when the user enters the
> information and "submits" the
> > page (using POST method), web server is validating
> the hidden field with
> > the client's IP address.
> >
> > This works fine when you have one proxy server -
> but breaks when we chain
> > a Child proxy to more than one Parent proxy server
> using "cache_peer"
> > directive as show below (Child squid.conf):
> >
> > cache_peer proxy1.xyz.com parent 3128 0 no-query
> round-robin
> > cache_peer proxy2.xyz.com parent 3128 0 no-query
> round-robin
> > cache_peer proxy3.xyz.com parent 3128 0 no-query
> round-robin
> > cache_peer proxy4.xyz.com parent 3128 0 no-query
> round-robin
> >
> >
> > Have any of you seen this issue ?
> >
> >
> > radha
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 12 message/rfc822
> Date: Fri, 15 Dec 2000 07:06:00 +1100
> From: "Robert Collins"
> <robert.collins@itdomain.com.au>
> To: "Venkataraman, Radha"
> <radha.venkataraman@intel.com>,
> <squid-users@ircache.net>
> Subject: Re: session based transaction and squid
> round-robin
>
> This is expected behaviour. The round-robin means
> that squid sends the queiries to proxy1, proxy2,
> proxy3, proxy 4 and back to
> proxy1. If an application on a web server uses IP
> address security or IP stickiness based on the
> server initiating the last
> connection to the server it will break.
> Such applications will also break if a user is on
> ADSL w/PPPoE and their IP address changes, or if
> they are on a modem connection
> that has a line fault and they have to redial.
>
> Contact the web server/application maintainer - they
> have made a two invalid assumptions about the
> internet: namely that IP
> address's are static, and that the machine
> connecting to their server is the users machine.
>
> Rob
>
> ----- Original Message -----
> From: "Venkataraman, Radha"
> <radha.venkataraman@intel.com>
> To: <squid-users@ircache.net>
> Sent: Friday, December 15, 2000 5:59 AM
> Subject: RE: session based transaction and squid
> round-robin
>
>
> >
> >
> > > Hi,
> > >
> > > We have stumbled into more than one web site
> implementing Session Based
> > > Transaction on top of Stateless HTTP
> connections. Browser makes the first
> > > request for a web page using GET method. Based
> on the initial page
> > > request's client IP, server sends out a custom
> web page containing a
> > > hidden field.. Then when the user enters the
> information and "submits" the
> > > page (using POST method), web server is
> validating the hidden field with
> > > the client's IP address.
> > >
> > > This works fine when you have one proxy server -
> but breaks when we chain
> > > a Child proxy to more than one Parent proxy
> server using "cache_peer"
> > > directive as show below (Child squid.conf):
> > >
> > > cache_peer proxy1.xyz.com parent 3128 0 no-query
> round-robin
> > > cache_peer proxy2.xyz.com parent 3128 0 no-query
> round-robin
> > > cache_peer proxy3.xyz.com parent 3128 0 no-query
> round-robin
> > > cache_peer proxy4.xyz.com parent 3128 0 no-query
> round-robin
> > >
> > >
> > > Have any of you seen this issue ?
> > >
> > >
> > > radha
> >
> > --
> > To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
> >
> >
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 13 message/rfc822
> Date: Fri, 15 Dec 2000 07:09:59 +1100
> From: "Robert Collins"
> <robert.collins@itdomain.com.au>
> To: "Thomas Carter" <tki3@mindspring.com>,
> <squid-users@ircache.net>
> Subject: Re: [SQU] Are there any squid devices that
> cache urls?
>
> Thomas, I suggest you read the squid-users FAQ
> located at http://www.squid-cache.org
>
> It will get you started. For a quick set of answers:
> squid is a proxy-cache; it does make browsing
> faster;it is designed for this;
> Linux is an option but not the only OS - any unix
> like OS can be used; the specs are dependant on more
> than just your user count
> they include things like expected cache duration and
> available bandwidth.
>
> Rob
>
> ----- Original Message -----
> From: "Thomas Carter" <tki3@mindspring.com>
> To: <squid-users@ircache.net>
> Sent: Friday, December 15, 2000 1:49 AM
> Subject: [SQU] Are there any squid devices that
> cache urls?
>
>
> Hi
>
> I am new to the group so forgive me for my
> ignorance, but I have joined the group to learn
> this.
> I have a project that requires me to cache 250 users
> url activity. Basically, they use the url once then
> in their cached account
> they recall it from cache rather than retreating
> from the internet. Hence, the web addressing should
> be much faster and in theory
> requiring less bandwidth and to the user there the
> internet connection would appear faster---right?
> The cached urls also are needed
> to be collected and helped for a period of time. Is
> there a pre-designed software package for this? Is
> the Linux OS the only way to
> go here?
> What are the performance spec a squid server you
> would need for this application?
>
> Educate me folks I am a nubie!
> Thomas Carter III
>
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 14 message/rfc822
> Date: Thu, 14 Dec 2000 13:41:29 -0800
> From: Lincoln Dale <ltd@cisco.com>
> To: Henrik Nordstrom <hno@hem.passagen.se>
> CC: Nathan Lewis <nathan_lewis@uclid.com>,
> squid-users@ircache.net
> Subject: Re: [SQU] More on WCCP and truncated GRE
> packets. --HELP
>
> At 08:47 AM 14/12/2000 +0100, Henrik Nordstrom
> wrote:
> > > 17:24:28.880017 eth0 < gre-proto-0x883E (gre
> encap)
> > > 17:24:29.183191 eth0 < truncated-ip - 24 bytes
> missing!gre-proto-0x883E
> > (gre encap)
> >
> > > truncated packets start coming in - ip_wccp
> ignores them - no
> > > unencapsulated packets come through.
> >
> >Your problem very much looks like the IOS problem
> another user found
> >some month ago.
> >
> >He found WCCP a Cisco 2621 gave truncated packets
> when using certain IOS
> >version, sometimes even down to the IP header of
> the encapsulated
> >packet.
> >
> > From trying different IOS versions he found that:
> > IOS 12.1-3a did not work and gave truncated
> packets
> > IOS 12.0-7T and IOS 12.1-5 worked fine.
>
> odd.
>
> >And MTU should rarely cause problems like this. It
> might cause
> >fragmented packets and performance loss, but not
> truncated packets. I
> >don't know at which level Cisco performs the
> fragmentation when doing
> >GRE encapsulation (i.e. if before encapsulation, or
> after), but it
> >should work either way.
>
> fragmentation will happen on after the packet has
> been encapsulated into
> the GRE packet itself. ie. the GRE packet will be
> fragmented.
>
> > From a TCP/IP point of view if would be best if
> >the fragmentation was done on the original packet
> and honouring the DF
> >bit. This way MSS detection would work just as
> usual.
>
> the issue is one of ensuring that packets never get
> fragmented prior to
> hitting the interception router.
> if the packet is already fragmented, then the router
> has no layer-4 state
> information in the second fragment of the packet
> from which to deduce "this
> is a packet destined towards tcp port 80".
>
> all i can state is that on cisco's caching products,
> we explicitly cap the
> advertised MSS in order to ensure that this is never
> a problem.
> it should be possible for squid to do the same via
> the use of an
> appropriate setsockopt() with the TCP_MAXSEG option.
>
>
> cheers,
>
> lincoln.
>
> --
> To unsubscribe, see
> http://www.squid-cache.org/mailing-lists.html
>

> ATTACHMENT part 15 message/rfc822
> Date: Thu, 14 Dec 2000 13:54:48 -0800
> From: Lincoln Dale <ltd@cisco.com>
> To: Nathan Lewis <nathan_lewis@uclid.com>
> CC: Henrik Nordstrom <hno@hem.passagen.se>,
> squid-users@ircache.net
> Subject: Re: [SQU] More on WCCP and truncated GRE
> packets. --HELP
>
> At 03:23 AM 14/12/2000 -0600, Nathan Lewis wrote:
> >>Your problem very much looks like the IOS problem
> another user found
> >>some month ago.
> >>
> >>He found WCCP a Cisco 2621 gave truncated packets
> when using certain IOS
> >>version, sometimes even down to the IP header of
> the encapsulated
> >>packet.
> >>
> >> From trying different IOS versions he found that:
> >> IOS 12.1-3a did not work and gave truncated
> packets
> >> IOS 12.0-7T and IOS 12.1-5 worked fine.
> >
> >Lincoln - this seems like a viable alternative to
> the MTU problem (since
> >it is the actual GRE packet which is truncated, not
> the underlying www
> >request, as would be implied by an MTU problem). I
> think I requested the
> >latest version of IOS for my Cisco 2610. Would I
> have to go back down to
> >12.0, or is there a 12.1(5)T available for the 2600
> series, as is implied
> >by the above message?
>
> i can't comment on the tcpdump traces Henrik
> included; if they're generated
> from tcpdump running on the same host as the ip_wccp
> module then we don't
> know for sure if the information is correct. (and
> only partial traces are
> posted).
>
> i'm not aware of any issues with 12.1(3). in fact,
> that is the exact
> release i run on my 2621 here.
>
> about the only possibility i see is under cisco bug
> id "CSCdr67139" (you
> can track this on CCO).
> basically, it is:
>
> This bug was introduced by CSCdp56613. It applies
> to low-end systems
> running IOS.
> It occurs in the fast switching path when WCCP is
> enabled. It happens because
> WCCP adds a GRE header to redirected packets and
> this is not accounted for
> in the fast switching path. The problem will also
> apply to any outgoing
> feature
> which involves adding an IP header to a packet.
>
> CSCdp56613 had been integrated into the following
> versions:
> 12.1(1.4)
> 12.0(10.03)S
> 12.1(1.4)T
> 12.0(10.3)SC
> 12.0(11)
> 12.0(11.1)
> 12.1(1)DB
> 12.1(1)DC
> 12.0(11.3)S
>
> so this problem will affect all low-end systems
> running these versions.
> the fix has been integrated into the following
> versions:
> 12.1(3.4)
> 12.1(3.4)T
> 12.1(3.4)AA
> 12.1(3.4)PI
> 12.0(12.6)
> 12.0(12.6)S
> 12.0(12.6)W05(18.00.54)
> 12.0(12.6)SC
>
>
>
> cheers,
>
> lincoln.

__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html