Re: [squid-users] Can't get transparent to work with squid and RH7.2

From: Squid Support (Henrik Nordstrom) <[email protected]>
Date: Tue, 2 Apr 2002 00:53:38 +0200

See the Squid FAQ on how to install WCCP. You are still missing some
components (WCCP support in the kernel).

Regards
Henrik

On Monday 01 April 2002 23:50, Brad Groshok wrote:
> Hi All:
>
> Having problems getting transparent proxy to work with
> Squid 2.5pre4 on a RH7.2 system with wccp
>
> Think I have squid setup properly
> from squid.conf:
>
> http_port 3128
> httpd_accel_host virtual
> httpd_accel_port 80
> httpd_accel_with_proxy on
> httpd_accel_uses_host_header on
>
> squid will answer if I set IE to port 3128, and surf around
>
> On my cisco I have:
>
> ip wccp version 1
> ip wccp web-cache redirect-list cache
>
> ip access-list extended cache
> deny tcp host 216.240.0.25 any
> permit tcp any any eq www
>
> my fastether port out to our upstream:
>
> ip wccp web-cache redirect out
>
> Router sees cache box (from sh ip wccp)
>
> Global WCCP information:
> Router information:
> Router Identifier: 216.240.0.250
> Protocol Version: 1.0
>
> Service Identifier: web-cache
> Number of Cache Engines: 1
> Number of routers: 1
> Total Packets Redirected: 4300
> Redirect access-list: cache
> Total Packets Denied Redirect: 0
> Total Packets Unassigned: 0
> Group access-list: -none-
> Total Messages Denied to Group: 0
> Total Authentication failures: 0
>
> On my RH7.2 box: (generic install)
> I (think) I have disabled ipchains and enabled iptables
>
> chkconfig --level 2345 ipchains off
> chkconfig --level 2345 iptables on
> and rebooted
>
> ran:
> iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT
> --to-port 3128
> to do the port forwarding.
>
> <disclaimer>
> I not a RH guy!
> </disclaimer>
>
>
>
> With all that done, on my router I see Total Packets Redirected
> increasing but never see anything in the squid access.log.
>
> Any/all help greatly appreciated.

-- 
MARA Systems AB, Giving you basic free Squid support
Customized solutions, packaged solutions and priority support
available on request
Received on Mon Apr 01 2002 - 15:54:20 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:18 MST