I recently had to reinstall the OS on a then functioning squid server with WCCPV2 enabled. My problem is that I have went through and got everything reinstalled and squid seems to be functioning correctly using port 3128.

I have set the following commands at startup like I had previously:

/sbin/iptunnel add gre1 mode gre remote {REMOTE_IP} local {LOCAL_IP} dev eth0
/sbin/ifconfig gre1 127.0.0.2 up
/bin/echo 1 > /proc/sys/net/ipv4/ip_forward
/bin/echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128


With this I can now use port 80 as the proxy port instead of 3128 directly, and I do not have a problem.

The problem starts when I re-enable the wccp redirects on the router directly in front of it. Keep in mind that the configuration on this router has not changed, and was functioning with the present configuration before I reinstalled. Nothing happens. The requests do not ever get to port 80 on the squid server. I can see the GRE tunnel, and it is established, and it is passing GRE traffic, at least I see GRE traffic coming from the router while doing a tcpdump.

What am I missing.... I have patched the kernel several times, and reread all the documentation I can find, and the logs show the WCCP packets going back and forth to the router and the router sees the Squid server as a WCCP device, but I can not get this to work. What am I missing? Please let me know and thanks in advance for your time.

Stephen



Reply via email to