Hi, Any help greatly appreciated. The problem is as follows (I'm sorry about the length of the message): If we run squid without WCCP enabled (put the proxy's IP directly into the browser) it works just fine. It proxies and caches without problems and it writes it all to the log/cache files. When I enable WCCP: 2005/12/16 08:26:12| Accepting HTTP connections at 0.0.0.0, port 8080, FD 12. 2005/12/16 08:26:12| Accepting ICP messages at 0.0.0.0, port 3130, FD 13. 2005/12/16 08:26:12| WCCP Disabled. 2005/12/16 08:26:12| Accepting WCCP v2 messages on port 2048, FD 14. 2005/12/16 08:26:12| Ready to serve requests. ...it works fine for few seconds UNTIL: 2005/12/16 08:26:43| Incoming WCCP2_I_SEE_YOU received id = 1475581. 2005/12/16 08:26:43| Incoming WCCP2_I_SEE_YOU member change = 236 tmp=236. 2005/12/16 08:26:48| WCCP2 Assigning Redirect 2005/12/16 08:26:54| Incoming WCCP v2 I_SEE_YOU length 144. 2005/12/16 08:26:54| Incoming WCCP2_I_SEE_YOU received id = 1475582. 2005/12/16 08:26:54| Incoming WCCP2_I_SEE_YOU member change = 0 tmp=236. 2005/12/16 08:26:54| Incoming WCCP2_I_SEE_YOU member change = 236. ...the redirect kicks in after which requests seem to get "lost". I can see them going out through tcpdump but the browsing just times out and nothing gets written in the logs: 08:21:20.538317 IP dhcp-128-142.xxx.xxx.xxx.4997 > www25.thdo.bbc.co.uk.http: S 476170301:476170301(0) win 16384 <mss 1460,nop,nop,sackOK> 08:21:20.814924 IP pahproxy.xxx.xxx.xxx.2048 > how6509-sw65-1.xxx.xxx.xxx.2048 : UDP, length 120 08:21:20.815280 IP how6509-sw65-1.xxx.xxx.xxx.2048 > pahproxy.xxx.xxx.xxx.2048: UDP, length 152 08:21:21.136345 IP how6509-sw65-1.xxx.xxx.xxx > pahproxy.xxx.xxx.xxx: GREv0, length 56: gre-proto-0x883e 08:21:21.136345 IP dhcp-129-176.xxx.xxx.xxx.49583 > thames.empics.co.uk.http: S 4087269319:4087269319(0) win 32768 <mss 1460,wscale 0,nop> 08:21:21.219919 IP how6509-sw65-1.xxx.xxx.xxx > pahproxy.xxx.xxx.xxx : GREv0, length 56: gre-proto-0x883e 08:21:21.219919 IP dhcp-133-116.xxx.xxx.xxx.miroconnect > ad.adtech.de.http: S 1265486987:1265486987(0) win 65535 <mss 1460,nop,nop,sackOK> 08:21:21.235035 IP how6509-sw65-1.xxx.xxx.xxx > pahproxy.xxx.xxx.xxx: GREv0, length 56: gre-proto-0x883e 08:21:21.235035 IP dhcp-133-116.xxx.xxx.xxx.virtual-places > 80.243.40.241.http: S 1265544079:1265544079(0) win 65535 <mss 1460,nop,nop,sackOK> Any ideas?! I know there is not much to go by but did anyone experience this before?! What would (better) alternative to WCCP be?! I'm very grateful to any suggestions or pointers... Thank you very much ----------------------------------------- SuSE 10 (2.6.13-15-bigsmp) SQUID pahproxy:/usr/local/squid/sbin # ./squid -v Squid Cache: Version 2.5.STABLE12 configure options: --enable-wccp --enable-wccpv2 SQUID config http_port 8080 httpd_accel_port 80 httpd_accel_host virtual wccp2_router 10.253.65.2 wccp2_version 4 WCCP ip_wccp-1.7 pahproxy:/usr/darko # modinfo ip_wccp filename: /lib/modules/2.6.13-15-bigsmp/kernel/net/ipv4/ip_wccp.ko author: Glenn Chisholm description: WCCP module license: GPL vermagic: 2.6.13-15-bigsmp SMP 586 REGPARM gcc-4.0 depends: srcversion: 008D2C9901DA8C9AF8181E1 IPTABLES iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 80 -j REDIRECT --to-ports 8080 ...and I've tried iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.253.65.142:8080 ...or even iptables -t nat -A PREROUTING -s 10.253.0.0/255.255.0.0 -d ! 10.253.0.0/255.255.0.0 -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.253.65.142:8080 -- Darko Longin
