James Gray wrote: > > So my question to the list is whether or not there is a better way to do this > (WCCP with Shorewall and Squid maybe)? Using ICMP-redirect with OSX clients > breaks routing to our DMZ's (we have two). >
Then turn off ICMP redirects.
In /etc/shorewall/init:
echo 0 > /proc/sys/net/ipv4/conf/<internal-if>/send_redirects
-Tom
--
Tom Eastep \ Nothing is foolproof to a sufficiently talented fool
Shoreline, \ http://shorewall.net
Washington USA \ [EMAIL PROTECTED]
PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- SF.Net email is sponsored by: The Future of Linux Business White Paper from Novell. From the desktop to the data center, Linux is going mainstream. Let it simplify your IT future. http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
