fre 2006-09-15 klockan 22:57 -0600 skrev Shaun Skillin (home): > I'm afraid I must still be missing something... according to the FAQ you > referenced (thank you by the way), the <Host-IP> should be used for the > eth0 and the wccp0 interface, which of course it doesn't like to do. Yes, and it works fine. There is no problem to have the same IP on many interfaces. > I used 1.2.3.4/32 for the wccp0 interface. A few things works better if the wccp interface has the same IP. > I see a redirected SYN packet arrive from the router to the Squid that > is GRE encapsulated. Then I see the SYN packet (not in GRE tunnel) sent > to its gateway, but it is using the IP address of the original sender, > not the Squid (however it does use the MAC of the Squid). Then your firewall iptables rules is not set proper. Regards Henrik
Attachment:
signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signerad meddelandedel