>
> On Sat, Dec 08, 2007, Jason Gauthier wrote:
>
> > To aid in troubleshooting I removed all instances except for 1. I
> > have one GRE tunnel, only one interface being redirected on the ASA.
> > Very simple now! :) My HTTPS issue still exists.
> >
> > Client, Proxy, ASA.. all on the same in
On Sat, Dec 08, 2007, Jason Gauthier wrote:
> To aid in troubleshooting I removed all instances except for 1. I
> have one GRE tunnel, only one interface being redirected on the ASA.
> Very simple now! :) My HTTPS issue still exists.
>
> Client, Proxy, ASA.. all on the same interface. Going
>
> * client -> proxy goes via WCCPv2 and GRE;
> * proxy -> client if they're on the same subnet goes straight back to
> the
> client and not via the ASA itself;
>
> Different interface:
>
> * client -> proxy goes via WCCPv2 and GRE;
> * proxy -> client needs to go via the ASA, but with a spoo
On Sat, Dec 08, 2007, Jason Gauthier wrote:
> Help me understand the logic (I know you don't have a set up like this
> in practice)
>
> I create a GRE tunnel from linux->ASA.
> I then use iptables to grab everything that hits that GRE tunnel to send
> it the squid proxy.
>
> iptables -t nat -
>
>
> > -Original Message-
> > From: Adrian Chadd [mailto:[EMAIL PROTECTED]
> > Sent: Thursday, December 06, 2007 9:53 PM
> > To: Jason Gauthier
> > Cc: squid-users@squid-cache.org
> > Subject: Re: [squid-users] Transparent WCCP/GRE HTTPS is
> -Original Message-
> From: Adrian Chadd [mailto:[EMAIL PROTECTED]
> Sent: Thursday, December 06, 2007 9:53 PM
> To: Jason Gauthier
> Cc: squid-users@squid-cache.org
> Subject: Re: [squid-users] Transparent WCCP/GRE HTTPS issue
>
> I'm pretty sure WCCPv2
On Fri, Dec 07, 2007, Jason Gauthier wrote:
> I understand what you are saying. I will give it a go. Should I create
> an iptables rule for each interface to capture port 80 traffic in
> addition to that? It would seem I would want to.
I don't have a PIX/ASA device here to work on and build wo
I'm pretty sure WCCPv2 is only supported on the same interface as the
clients. You'd have to run multiple interfaces w/ multiple instances.
Adrian
On Thu, Dec 06, 2007, Jason Gauthier wrote:
> All,
>
> I tried to be concise with the subject ;) Let me get started. I'm
> having a problem,
