On Mon, Dec 04, 2006, Jason Taylor wrote: > However, a tcpdump on the GRE interface of the squid shows only the > first packet (SYN). > A tcpdump on the eth2 (where squid is listening) shows the SYN-ACK > packet being sent back to the workstation. Whats the wccp config on the router look like? Whats the wccp config on the squid(s) look like? Whats the redirection config (iptables) look like? And hm, have you disabled anti-spoof checks on the linux box (rp_filter) ? adrian -- - Xenion - http://www.xenion.com.au/ - Hosting and Commercial Squid Support -