Date: Sat, 1 Feb 2003 15:49:23 -0800 From: Faried Nawaz <fn@hungry.org> To: freebsd-isp@freebsd.org Cc: freebsd-net@freebsd.org Subject: pseudo-device gre and wccp/squid Message-ID: <20030201234923.GA83216@nilpotent.org>
next in thread | raw e-mail | index | archive | help
Hello, Is anyone using the gre pseudo-device with squid for WCCP? Try as I might I can't get it to work for me. I'm using FreeBSD 4.7-STABLE, using ipfilter's ipnat to redirect packets. I've done ifconfig gre0 create ifconfig gre0 aaa.bbb.ccc.ddd fff.ggg.hhh.iii netmask 255.255.255.255 link0 up ifconfig gre0 tunnel aaa.bbb.ccc.ddd fff.ggg.hhh.iii aaa.bbb.ccc.ddd is the web proxy's ip, fff.ggg.hhh.iii is the router's. ipnat.rules has rdr gre0 0.0.0.0/0 port 80 aaa.bbb.ccc.ddd port 8080 tcp ipfilter is set to pass through all traffic, and there are no firewall rules defined. tcpdump on my ethernet interface shows gre packets coming in. 04:07:39.093205 fff.ggg.hhh.iii > aaa.bbb.ccc.ddd: gre gre-proto-0x883E tcpdump on my gre0 interface shows incoming connections from the users, and ipnat -l shows lots of redirects. proxy1# ipnat -l | head List of active MAP/Redirect filters: rdr gre0 0.0.0.0/0 port 80 -> aaa.bbb.ccc.ddd port 8080 tcp List of active sessions: RDR aaa.bbb.ccc.ddd 8080 <- -> 207.44.178.61 80 [203.215.178.61 4122] RDR aaa.bbb.ccc.ddd 8080 <- -> 205.188.250.25 80 [203.215.178.19 1612] RDR aaa.bbb.ccc.ddd 8080 <- -> 66.51.99.157 80 [66.206.32.180 3769] RDR aaa.bbb.ccc.ddd 8080 <- -> 64.94.89.238 80 [203.215.177.248 1172] RDR aaa.bbb.ccc.ddd 8080 <- -> 207.46.104.20 80 [66.206.33.7 1601] proxy1# However, none of them get to squid. Everything worked fine before the upgrade, but I was using the gre patch from squid's web site to do the work. The new pseudo-device appears to have WCCP-specific code in it, but it's not working. Does anyone have this working? Anyone at all? I'm willing to break down and switch to ipfw if that'll help, but I can't upgrade my machines to 4.7 (and higher) properly without a fix. Surely someone has used this since the code was commited. (A hack would be to comment out all code related to the pseudo-device so I can use the wccp-specific gre.c.) Faried. -- The Great GNU has arrived, infidels, behold his wrath ! "If a MOO runs on a port no one accesses, does it run?" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030201234923.GA83216>