tor 2006-03-16 klockan 12:46 -0800 skrev Kamel A. Baba:
> Thanks Henrik. That fixed my problem
> I have 1 more question though. Which would you say is more efficient:
> using the ip_wccp mod or the GRE interface. Any recommendation?
No noticeable difference in performance, but the ip_gre works bet
Thanks Henrik. That fixed my problem!
I have 1 more question though. Which would you say is
more efficient: using the ip_wccp mod or the GRE
interface. Any recommendation?
Thanks,
Kamel
--- Henrik Nordstrom <[EMAIL PROTECTED]>
wrote:
> ons 2006-03-15 klockan 14:03 -0800 skrev Kamel A.
> Baba:
>
ons 2006-03-15 klockan 14:03 -0800 skrev Kamel A. Baba:
> [34:1632] -A PREROUTING -i gre0 -p tcp -m tcp --dport
> 80 -j DNAT --to-destination 127.0.0.1:8080
> COMMIT
Don't DNAT to 127.0.0.1, DNAT to a real IP address..
The loopback address is special, and the kernel will silently drop any
traffi
> Then most likely your NAT rules are not correct.
>
> Or you have rp_filter or similar enabled causing the
> packets to be
> immediately discarded.
>
> Or other firewalling rules discarding the traffic.
>
> iptables-save -c
[EMAIL PROTECTED] ~]# iptables-save -c
# Generated by iptables-save
ons 2006-03-15 klockan 09:22 -0800 skrev Kamel A. Baba:
> Daniel,
>
> Thanks for your help.
> I tried what you suggested. However, I am getting the
> same results as before. The traffic is actually being
> redirected to DG/squid and being decapsulated but
> still DG cannot see the traffic.
Then m
Henrik,
I see that you're very active in helping people on
this list. I am pretty sure everyone appreciates that.
Would you be able to help in fixing my problem
functionality wwise first?
Thanks in advance.
Kamel
--- Henrik Nordstrom <[EMAIL PROTECTED]>
wrote:
> tis 2006-03-14 klockan 23:26 -0
Daniel,
Thanks for your help.
I tried what you suggested. However, I am getting the
same results as before. The traffic is actually being
redirected to DG/squid and being decapsulated but
still DG cannot see the traffic.
I did a tcpdump while trying to access dell.com
(143.166.224.178) and here's
Everyone,
I ran out of file descriptors after putting this config for 1 minute
on a high volume network. I'll improve it with iptables REDIRECT and
load gre module at startup.
Much Regards,
Dan
On 3/15/06, Henrik Nordstrom <[EMAIL PROTECTED]> wrote:
> ons 2006-03-15 klockan 16:56 +0545 skrev
ons 2006-03-15 klockan 08:16 -0500 skrev Shoebottom, Bryan:
> This would work, but will give you some errors on boot as the gre module
> won't be loaded before you start the network.
As the distribution doesn't support GRE there should not be any system
defined network configuration for the gre i
2006 5:31 AM
To: Daniel EPEE LEA
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Transparent caching problem
tis 2006-03-14 klockan 23:26 -0800 skrev Daniel EPEE LEA:
> [EMAIL PROTECTED] network-scripts]# cat ifcfg-gre0
> DEVICE=gre0
> BOOTPROTO=static
> IPADD
sers@squid-cache.org
Subject: RE: [squid-users] Transparent caching problem
Hello Daniel Epee Lea,
Regarding:
2- for ip tables -A PREROUTING -s My_Network/20 -d !
My_Network/20
- i gre0 -p tcp -m tcp --dport 80 -j DNAT --to-destination
my_cache_server_IP:3128
If the http
ons 2006-03-15 klockan 16:56 +0545 skrev arabinda:
> If the http traffic is very high, is it possible that DNAT can be a bottle
> neck?
If you run out of iptables/netfilter conntrack entries then performance
will go down the drain. This gets logged in the kernel syslog messages
if it happens..
R
]
Sent: Wednesday, March 15, 2006 1:11 PM
To: Ryan Sumida
Cc: Kamel A. Baba; squid-users@squid-cache.org
Subject: Re: [squid-users] Transparent caching problem
Kamel,
I used
1- For gre tunned, after loading ip_gre module at startup, I have
this gre interface.
You can copie it exactly the IP address
tis 2006-03-14 klockan 23:26 -0800 skrev Daniel EPEE LEA:
> [EMAIL PROTECTED] network-scripts]# cat ifcfg-gre0
> DEVICE=gre0
> BOOTPROTO=static
> IPADDR=172.16.1.6
> NETMASK=255.255.255.252
> ONBOOT=yes
> IPV6INIT=no
Eum.. for security reasons it's recommended to make the WCCP GRE
interface a poi
Kamel,
I used
1- For gre tunned, after loading ip_gre module at startup, I have
this gre interface.
You can copie it exactly the IP address in there doesn't matter.
[EMAIL PROTECTED] network-scripts]# cat ifcfg-gre0
DEVICE=gre0
BOOTPROTO=static
IPADDR=172.16.1.6
NETMASK=255.255.255.252
ONBOOT=
fine now but I'm not sure why. I'll figure it out later.
Ryan
"Kamel A. Baba" <[EMAIL PROTECTED]>
03/14/2006 02:35 PM
To
squid-users@squid-cache.org
cc
Kamel Baba <[EMAIL PROTECTED]>
Subject
[squid-users] Transparent caching problem
Hi,
This is kin
Hi,
This is kind of driving me crazy. I've been trying to
get transparent caching to work for the last 2 days
without success.
I am only posting to get help after I read so much on
this and I think I quite understand what needs to be
done but still DG/SQUID do not see the traffic.
Ok, so I have
PM
To: John Hally
Cc: '[EMAIL PROTECTED]'
Subject: Re: [squid-users] transparent caching problem
On Wed, 2003-10-08 at 02:54, John Hally wrote:
> Hello,
>
> I'm having a really weird problem where I get refused requests when
browsing
> any sites on the intranet, but Internet
On Wed, 2003-10-08 at 02:54, John Hally wrote:
> Hello,
>
> I'm having a really weird problem where I get refused requests when browsing
> any sites on the intranet, but Internet browsing is fine. As soon as I pull
> the redirect off of the router interface, the ability to browse the intranet
> r
Hello,
I'm having a really weird problem where I get refused requests when browsing
any sites on the intranet, but Internet browsing is fine. As soon as I pull
the redirect off of the router interface, the ability to browse the intranet
returns. Has anyone else experienced this?
Thanks in adva
20 matches
Mail list logo
