-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey There, There are some parts which missing from your picture to me. First I wanted to ask if you had the chance to look at what I have written about the subject: http://wiki.squid-cache.org/ConfigExamples/UbuntuTproxy4Wccp2 It might not answer your question but it's important to first understand the scenario from both IP layer etc. Your first email is a "Re" which I am not able track back into the original thread. If you can please describe you topology and not like this: | | | | | | | | | | | Ubuntu 10.04 Transparent squid3 proxy using wccp2 on c...See my last post for more defined questions = ID:37147216 ADSLMODEM-GATEWAY --> 2801-ROUTING-NAT --> 3550-L3-ACL-VLAN --> 3550-L2-SWIT... | | | It's not clear to me and probably to some other. It's cryptic and non informative. Thanks, Eliezer On 11/02/2014 03:41 AM, Yogesh Gawankar wrote: > Hello Amos Thanks for your reply.I don't think I explained my > problem well > > With wccp gre redirection, when the tcp syn reaches the cisco > router that is set up for wccp redirection , it redirects it to the > CE using wccp gre. Squid will respond with syn-ack and send it > back to the router again via wccp-gre. However this is not > happening. it sends it back using regular Gre (same as wccp-gre but > with no wccp header) > > > Please refer to my attached capture .I need to get squid to put > that wccp header on the return packet.In squid.conf I already > specified gre return. Are you saying squid (too!) cannot do gre > return for return traffic and does normal ip forwarding? > > I got squid version 3 running on ubuntu. > > Thanks and regards > > Yogesh Gawankar > > > On Sunday, November 2, 2014 6:52 AM, Amos Jeffries > <squid3@xxxxxxxxxxxxx> wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > > On 2/11/2014 7:05 a.m., Yogesh Gawankar wrote: >> Hello >> >> >> I am trying to get squid to send return traffic to the cisco >> router via a gre tunnel. I am observing that squid returns >> traffic in gre tunnel this is ip in ip gre not wccp-gre . The >> firewall is dropping this packet as expected. I have gone through >> many posts online so kindly respond if you know how to get it to >> send return traffic via wccp-gre (not standard gre) or if you had >> any suggestions for me in terms of linux kernel change. > > WCCP-GRE is for transmitting WCCP protocol control packets > informing the router whether the proxy is still available or not. > That is all. > > The HTTP traffic from router to Squid (wccp_forwarding_method) > goes through the GRE as if it were regular GRE. > > The HTTP traffic from Squid to router (wccp_return_method and > regular Squid->Internet connections) is normal traffic and needs > routing as such instead of dropping or diverting back towards > Squid. > > Amos -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 > (MingW32) > > iQEcBAEBAgAGBQJUVYcUAAoJELJo5wb/XPRjYAwH/RQXc3S7bH5w/5lYdLyYRQ/H > Y2GT88IdeM8gz067OMkGR7lTwzIMK4EVmb9GEQJYhLNznZB8hFDYnNDmSL3spB9F > mxHYZ4BVlDTlMLi4qHf05mrpsdEodrhF9A3H8YmzXLWHx5sxyukLfR/R7UJlP14K > S9xZa3KhKE/SERNM8iwPggNdtzdjrBhs6U2AUhmpeNjEgEiOgkgT7XRm724hMj21 > 9CH5kgGt4qiE5plPfSqTdyiJSBbQF5NL50g8/NSrQ4bRilTD9Fdf+kVRoSnscrAF > ViQKzc5L8s+3YMmVmXyynM0s4YPy5bj9Qgqi5nWjQG9gSBRLeedsyK1rdlcQmbQ= > =CQHA -----END PGP SIGNATURE----- > _______________________________________________ squid-users mailing > list squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users > > > > > > > _______________________________________________ squid-users mailing > list squid-users@xxxxxxxxxxxxxxxxxxxxx > http://lists.squid-cache.org/listinfo/squid-users > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUVfB3AAoJENxnfXtQ8ZQUs1QH/jfWW/YdERQvb/jZCNj1kxrC Cq3ryO4NrhcdQcJnUtdb4BqpdwLoTT4A7J3OXiCmbY2hIsD8cC6a1bwldsOaM7Sb fAhoM1MfoFUvbGXcAZs9EPhbClpmXRfzNqn6JQlt4+xLdh8Fzb6OHj/KtsV//xBN 6uPCHZ7C+ONaXOPREz6ujuHGlWa6LbjGR1Dop1Z/N18w24qoZyajnLnyqfnUnlBl iNc9MeKKPlXs6ojsdGuUdXKmjm4EBNfKAnejuWKI9UODLeJYGldIjYaCUMycLZ8p /6LkH1xg/6mWNX30HuOtrHAVgey/VB91kEINrHZ2ZYmE27y3+9ZqSC4HFDAFdDg= =9Hm6 -----END PGP SIGNATURE----- _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
