[squid-users] squid 3.5.19, wccp2, pf and forwarding loop

Amos Jeffries squid3 at treenet.co.nz
Mon May 23 06:48:57 UTC 2016


On 23/05/2016 4:41 p.m., Mark Davies wrote:
> I know this comes up repeatedly but I'm now hitting this and can't see why.
> 
> I have a traditional squid setup that works fine for clients that 
> explicitly point at it but I also want to allow transparent access for some 
> destinations for only port 80.  So I have wccp2 set up between a cisco 
> switch and the squid to direct the traffic to the box (and that seems to be 
> happening fine).  I have the below pf.conf (This is on NetBSD using PF) on 
> the box to direct the traffic to the intercept port:
> 
> 
> ext_if="wm0"
> int_if="bnx0"
> 
> set skip on lo0
> 
> rdr pass on $int_if inet proto tcp from 130.195.0.0/20 to any port 80 -> 
> 127.0.0.1 port 8081

What prevents Squids outgoing traffic (to port 80) from being diverted
back into Squid again?

Amos



More information about the squid-users mailing list