I use wccp/gre tunnel. Port 80 requests work but 443 don't. I am not sure if this is right, but even though data was received on wccp, no data was transmitted back over wccp. In other words, squid server response was routed back, through eth0 interface, rather than go through wccp0 interface. Is this expected behavior? If not, what do I do to make response go over wccp? my iptable config look like this iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 80 -j DNAT --to 192.168.5.81:3228 iptables -t nat -A PREROUTING -i wccp0 -p tcp --dport 443 -j DNAT --to 192.168.5.81:3229 and squid.conf wccp2_service dynamic 90 wccp2_service_info 90 protocol=tcp priority=240 ports=80,443