Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-09 Thread Eliezer Croitoru
On 7/9/2012 7:00 AM, Ming-Ching Tiew wrote: - Original Message - for i in /proc/sys/net/ipv4/conf/*/rp_filter ; do echo 2 $i done Really strange. I have never able to get tproxy to work unless I switch the rp_filter to 0. When rp_filter is 2, I could sniff the traffic, but

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-08 Thread Ming-Ching Tiew
- Original Message - for i in /proc/sys/net/ipv4/conf/*/rp_filter ; do echo 2 $i done Really strange. I have never able to get tproxy to work unless I switch the rp_filter to 0. When rp_filter is 2, I could sniff the traffic, but somehow squid is not able to see it. 

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-06 Thread Eliezer Croitoru
On 7/6/2012 5:16 AM, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: On 7/5/2012 4:48 AM, Ezequiel Birman wrote: SNIP dont worry! i dont know anyone that masters linux and got it all from books he didnt bout :) XD I meant, of course, the

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-06 Thread Amos Jeffries
On 7/07/2012 2:42 a.m., Eliezer Croitoru wrote: On 7/6/2012 5:16 AM, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru writes: On 7/5/2012 4:48 AM, Ezequiel Birman wrote: SNIP dont worry! i dont know anyone that masters linux and got it all from books he didnt bout :)

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-06 Thread Eliezer Croitoru
On 7/7/2012 4:52 AM, Amos Jeffries wrote: snip #i use conntrack to flush the old sessions so all the new ones will be redirected to squid. conntrack -F This need to be noted as quite dangerous. It will force all existing connections into the NEW state and pass them through Squid

[squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-05 Thread Ezequiel Birman
Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: On 7/5/2012 4:48 AM, Ezequiel Birman wrote: Amos == Amos Jeffries squ...@treenet.co.nz writes: On 04.07.2012 15:54, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: snip

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-05 Thread Ming-Ching Tiew
--- On Fri, 7/6/12, Ezequiel Birman stormwa...@espiga4.com.ar wrote: In http://wiki.squid-cache.org/Features/Tproxy4#Routing_configuration I see rules applied to eth0, should i rewrite br0 in place of eth0? I think it should rather be lo. I did not follow the rp_filter thingie

[squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-04 Thread Ezequiel Birman
Amos == Amos Jeffries squ...@treenet.co.nz writes: On 04.07.2012 15:54, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: snip http://wiki.squid-cache.org/ConfigExamples/Intercept/DebianWithRedirectorAndReporting this is a good way

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-04 Thread Eliezer Croitoru
On 7/5/2012 4:48 AM, Ezequiel Birman wrote: Amos == Amos Jeffries squ...@treenet.co.nz writes: On 04.07.2012 15:54, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: snip

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-03 Thread Eliezer Croitoru
On 7/3/2012 5:05 AM, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: hey there Ezequiel, the Cisco RV042 is a nice product but.. 100 users on this device might not be the problem. i think that the main problem is the wan connections

[squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-03 Thread Ezequiel Birman
Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: On 7/3/2012 5:05 AM, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: hey there Ezequiel, the Cisco RV042 is a nice product but.. 100 users on this device might not be the problem.

Re: [squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-03 Thread Amos Jeffries
On 04.07.2012 15:54, Ezequiel Birman wrote: Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: snip No problem, I've used bind before. Sorry to ask this on squid-users but did anyone try pdnsd (http://members.home.nl/p.a.rombouts/pdnsd/), pdns-recursor, dnsmasq (not sure if it

[squid-users] Re: transparent (intercepting?) without wccp, options?

2012-07-02 Thread Ezequiel Birman
Eliezer == Eliezer Croitoru elie...@ngtech.co.il writes: hey there Ezequiel, the Cisco RV042 is a nice product but.. 100 users on this device might not be the problem. i think that the main problem is the wan connections them-self. if it's a cable line with 6 and 3 Mbps