In message <[EMAIL PROTECTED]>
Daniel Barron <[EMAIL PROTECTED]> wrote:
[snip]
> This problem has only started happening since I upgraded the squid box from
> a RH6.2 to a RH8.
>
> I thought it might be icmp redirects so have switched it off in
> /proc/sys/net/ipv4/conf/*/send_redirects
>
> but this made no difference.
[snip]
Oh - how embarassing! Doing the above *did* make a difference and stopped
the clients from making a new route. But a mistake in the iptables meant
the iptable with the redirect from 80 was not linked in and so was never
called. I blame my collegue who set it up the iptables on the box ;)
This was discovered by using etherreal which showed the packets were indeed
routing through the filter - just not getting redirected to squid.
Thank you to everyone who replied!
--
Daniel Barron
(Visit http://dansguardian.org/ - True web content filtering for all)