���-�� ����� Wed, Mar 07, 2001 at 09:32:54AM +0200 Igor Khasilev �������(�) � ��� 
����� � ��� ��� ���:

IK> ���-�� ����� ����� ����� ��������� ��������� � �� ����������� �������.
IK> ��� ��������. ����������, ��������� �������� ��������� ���-��
IK> ����������� ���������� From.

����. ��������������
����� ��� ����� ���������

IK> � �� ����: ��, �����������. ���� �ӣ ����� ��, �� � ������� �������� �������
IK> ����� wccp2. � ���� ������ ������� - ��� ���������� wccp, ��������
IK> ���������� (��������) ���� ������� ����������� � wccp, - ��� ����� �����
IK> �������� ������ ����������������, ���� � ������� ���� ������ ��� ����� ���
IK> ����������.

cisco:

chesheer#sh conf | include wccp
.... 
ip wccp version 1
ip wccp web-cache redirect-list 100
....
in se x/x
....
 ip wccp web-cache redirect out
....

chesheer#sh ip wccp
Global WCCP information:
    Router information:
        Router Identifier:                   212.26.128.40
        Protocol Version:                    1.0

    Service Identifier: web-cache
        Number of Cache Engines:             1
        Number of routers:                   1
        Total Packets Redirected:            12336589
        Redirect access-list:                100
        Total Packets Denied Redirect:       27403443
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0

squid:
#  TAG: wccp_router
#       Use this option to define your WCCP ``home'' router for
#       Squid.   Setting the 'wccp_router' to 0.0.0.0 (the default)
#       disables WCCP.
wccp_router 212.26.128.209

# HTTPD-ACCELERATOR OPTIONS
# -----------------------------------------------------------------------------

#  TAG: httpd_accel_host
#  TAG: httpd_accel_port
#       If you want to run Squid as an httpd accelerator, define the
#       host name and port number where the real HTTP server is.
#
#       If you want virtual host support then specify the hostname
#       as "virtual".
#
#       NOTE: enabling httpd_accel_host disables proxy-caching and
#       ICP.  If you want these features enabled also, then set
#       the 'httpd_accel_with_proxy' option.
#
httpd_accel_host virtual
#httpd_accel_port port

#  TAG: httpd_accel_with_proxy  on|off
#       If you want to use Squid as both a local httpd accelerator
#       and as a proxy, change this to 'on'.
#
httpd_accel_with_proxy on

#  TAG: httpd_accel_uses_host_header    on|off
#       HTTP/1.1 requests include a Host: header which is basically
#       the
#       hostname from the URL.  Squid can be an accelerator for
#       different HTTP servers by looking at this header.  However,
#       Squid does NOT check the value of the Host header, so it opens
#       a big security hole.  We recommend that this option remain
#       disabled unless you are sure of what you are doing.
#
#       However, you will need to enable this option if you run Squid
#       as a transparent proxy.  Otherwise, virtual servers which
#       require the Host: header will not be properly cached.
httpd_accel_uses_host_header on

�� � redirect ����� ipchains 80/tcp --> 3128/tcp

������ �������� ����� ��������� ������ ip_wccp, �� � ����� �
����������� ��������� �� 2.4.x ��������� ������������� � gre tunnel
��� �������� linux 2.4.2ac6 � cisco ��������� ������ ���� ����� gre -
��� ���� ����� ��������

���� � 2.4.x ����� ����������� �� ���-�� ���������, � ���-�� ������
����������� ����� sysctl (�� ��������� 16384)

������� ������, � squid 2.4DEVEL ��������� ���� ����� �������������
����� � netfilter - �.�. ����� ����������� ����
����� �� ��� �������� � oops?


____________________________________________________________________
Info&Contacts -- RIPE: MAGE-RIPE, InterNic: AT2963, ICQ: 18035130
PGP: ftp://blackhole.adamant.net/pgp/mykey.pgp.asc
������� ����� ����� �����. �� ��� ��� ���� ��� ��� �� ��� ��������.

=====================================================================
If you would like to unsubscribe from this list send message to
[EMAIL PROTECTED] with "unsubscribe oops" in message body.
Archive is accessible on http://www.paco.net/oops/

Дати відповідь електронним листом