Re: [squid-users] WCCP / no return traffic on gre interface

ons 2007-05-09 klockan 08:48 -0400 skrev Chad Harrelson:
> Hello list,
> I am still battling WCCP... My ultimate goal is to get WCCPv2
> functioning properly on a RHEL5 box (squid-2.6.STABLE6-3.el5)
> 2.6.18-8.el5xen -- connected to a Cisco 7600 (with SUP 720) ISO
> 12.2(18). Since I am having no luck with WCCPv2 I have been using v1.
> I have gotten as far as seeing http traffic leaving my gre interface
> but I do not see that same traffic on eth0 (my external interface) and
> of course the packets do not reach the destination. Here are my
> relavant configs:
>
> modprobe ip_gre
> iptunnel add gre1 mode gre remote 150.125.125.186 local
> 150.125.125.185 dev eth0
> ifconfig gre1 150.125.125.187 netmask 255.255.255.248 up (I have
> tried many variations on IP addresses here. Having a real routable IP
> is the only I can avoid seeing ICMP proto 47 unreachable errors on
> eth0)

You also need to disable rp_filter, and set up iptables interception
rules. See the FAQ.

http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-a7fed84c39e23407b93737da0815d1e6ed926a4f

http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-935dbe4ef8ea8e21c1e04cc7753a09095c0d8285

http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-1baf52754892d9355e3aa292dd70d96d74608b9b

Regards
Henrik