Would anyone have any insight to the problem I have described below. The only answers I have had from my previous post were other people saying they have the same problem. It would appear this is an issue being experienced more widely than just by myself. Thanks Nigel ---------------------------------------------------------------------------- -------------------------------------------- Hope someone can help with this problem. After considerable effort I cannot get WCCP and Fedora 3 to work. Read all posts and tried everything I can think of but no joy. Configuration Fedora 3 2.6.11-1.14_FC3, Squid 2.5.STABLE9-1.FC3.4 Cisco IOS (tm) 3600 Software (C3620-I-M), Version 12.2(19), RELEASE SOFTWARE (fc3) I have configured the system using the following config (+ many other variants) Router 192.168.1.254 Fedora 3 192.168.1.148 GRE > modprobe ip_gre > ip tunnel add wccp mode gre remote 192.168.1.254 local 192.168.1.148 dev eth0 > ip link set wccp up SQUID PARAMETERS Http_port 3128 Wccp_router 192.168.1.254 Httpd_accel_host virtual Httpd_accel_port 80 Httpd_accel_with_proxy on Http_accel_uses_host header on compiled with --prefix=/usr/local --enable-wccp --enable-linux-netfilter --enable-async-io IPTABLES Iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 (also tried DNAT) SYSCTL netipv4.ip_forward = 1 net.ipv4.conf.all.rp_filter = 1 (and tried 0) kernel.sysrq = 0 CISCO ip wccp version 1 ip wccp web-cache int eth0/0 ip wccp web-cache redirect out RESULTS Cache will respond correctly to browsers set with proxy settings for ports 3128 and 80 Cisco and Fedora correctly exchange "hear I am" and "I see you" packets Cisco sh ip wccp correctly identifies the cache. (the router identifier shows 192.168.1.254 which is an unused ethernet port which is odd) Ethereal on fedora shows http packets coming in correctly on wccp interface as does tcpdump (shown as linux cooked capture) I cannot see any http packets coming out of the cache and my browser will not transparently access websites I am at a total loss here and any help will be gratefully received Thanks Nigel Oakley
