Hi, Your unix box is not browsing but as a proxy after the redirection is made the packets will go to the proxy and then again to the router, and they will fall into the policy routing rules.
-----Original Message----- From: Awie [mailto:[EMAIL PROTECTED] Sent: Friday, September 12, 2003 10:52 PM To: Squid-users Subject: [squid-users] Route map and strange things happen All, I found a strange thing happen at my system. I run a transparent proxy using route-map (coz my WCCP is still not work well). I made some settings as below: *********************************************************** dpr-gtw-01#sh access-lists redirect-to-squid Extended IP access list redirect-to-squid deny tcp host aaa.aaa.aaa.aaa any eq www (1263621 matches) permit tcp any any eq www (595562 matches) ! ! interface FastEthernet0/0 description connected to BackBone Switch ip address bbb.bbb.bbb.bbb 255.255.255.192 ip policy route-map proxy ! ! ! route-map proxy permit 10 match ip address redirect-to-squid set ip next-hop aaa.aaa.aaa.aaa ! As I see the strange things happen at the denied packets below; deny tcp host aaa.aaa.aaa.aaa any eq www (1263621 matches) Would you tell me why there are so many denied packets? My Linux box is not be used for browsing at all. Your answer is very appreciated. Thx & Rgds, Awie