<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:24px"><div id="yiv5880871692"><div id="yui_3_16_0_1_1414864197437_62203"><div id="yui_3_16_0_1_1414864197437_62202" style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:24px;"><div id="yiv5880871692yui_3_16_0_1_1414864197437_59279">Hello Amos</div><div id="yiv5880871692yui_3_16_0_1_1414864197437_59605"><br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59280">Thanks for your reply.I don't think I explained my problem well <br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59281"><br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59314">With wccp gre redirection, when the tcp syn reaches the cisco router that is set up for wccp redirection , it redirects it to the CE using wccp gre. Squid will respond with syn-ack and send it back to the router again via wccp-gre. However this is not happening. it sends it back using regular Gre (same as wccp-gre but with no wccp header)<br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59320"><br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59318"><br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59317">Please refer to my attached capture .I need to get squid to put that wccp header on the return packet.In squid.conf I already specified gre return.</div><div id="yui_3_16_0_1_1414864197437_62211" dir="ltr"><br clear="none"></div><div id="yui_3_16_0_1_1414864197437_62213" dir="ltr">Are you saying squid (too!) cannot do gre return for return traffic and does normal ip forwarding?<br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59326"><br clear="none"></div><div dir="ltr" id="yiv5880871692yui_3_16_0_1_1414864197437_59328"><div id="yui_3_16_0_1_1414864197437_62231">I got squid version 3 running on ubuntu.</div><div id="yui_3_16_0_1_1414864197437_62233"><br></div><div id="yui_3_16_0_1_1414864197437_62235"><br></div></div><div id="yiv5880871692yui_3_16_0_1_1414864197437_59312"><span></span></div><div id="yiv5880871692yui_3_16_0_1_1414864197437_59310"> </div><div class="yiv5880871692signature" id="yiv5880871692yui_3_16_0_1_1414864197437_59298"><div id="yiv5880871692yui_3_16_0_1_1414864197437_59306"><strong id="yiv5880871692yui_3_16_0_1_1414864197437_59308">Thanks and regards<br clear="none"><br clear="none">Yogesh Gawankar</strong></div><div id="yiv5880871692yui_3_16_0_1_1414864197437_59297" style="BACKGROUND-COLOR:transparent;FONT-STYLE:normal;FONT-FAMILY:arial, helvetica, clean, sans-serif;COLOR:rgb(0,0,0);FONT-SIZE:13px;"><br clear="none"><strong id="yiv5880871692yui_3_16_0_1_1414864197437_59296"><var id="yiv5880871692yui-ie-cursor"></var></strong></div></div> <div class="yiv5880871692qtdSeparateBR"><br clear="none"><br clear="none"></div><div class="yiv5880871692yqt4701499161" id="yiv5880871692yqt23870"><div class="yiv5880871692yahoo_quoted" style="display: block;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:24px;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Sunday, November 2, 2014 6:52 AM, Amos Jeffries <squid3@treenet.co.nz> wrote:<br clear="none"> </font> </div> <br clear="none"><br clear="none"> <div class="yiv5880871692y_msg_container">-----BEGIN PGP SIGNED MESSAGE-----<br clear="none">Hash: SHA1<br clear="none"><div class="yiv5880871692yqt8922795373" id="yiv5880871692yqtfd68522"><br clear="none">On 2/11/2014 7:05 a.m., Yogesh Gawankar wrote:<br clear="none">> Hello<br clear="none">> <br clear="none">> <br clear="none">> I am trying to get squid to send return traffic to the cisco<br clear="none">> router via a gre tunnel. I am observing that squid returns traffic<br clear="none">> in gre tunnel this is ip in ip gre not wccp-gre . The firewall is<br clear="none">> dropping this packet as expected. I have gone through many posts<br clear="none">> online so kindly respond if you know how to get it to send return<br clear="none">> traffic via wccp-gre (not standard gre) or if you had any<br clear="none">> suggestions for me in terms of linux kernel change.</div><br clear="none"><br clear="none">WCCP-GRE is for transmitting WCCP protocol control packets informing<br clear="none">the router whether the proxy is still available or not. That is all.<br clear="none"><br clear="none">The HTTP traffic from router to Squid (wccp_forwarding_method) goes<br clear="none">through the GRE as if it were regular GRE.<br clear="none"><br clear="none">The HTTP traffic from Squid to router (wccp_return_method and regular<br clear="none">Squid->Internet connections) is normal traffic and needs routing as<br clear="none">such instead of dropping or diverting back towards Squid.<br clear="none"><br clear="none">Amos<br clear="none">-----BEGIN PGP SIGNATURE-----<br clear="none">Version: GnuPG v2.0.22 (MingW32)<br clear="none"><br clear="none">iQEcBAEBAgAGBQJUVYcUAAoJELJo5wb/XPRjYAwH/RQXc3S7bH5w/5lYdLyYRQ/H<br clear="none">Y2GT88IdeM8gz067OMkGR7lTwzIMK4EVmb9GEQJYhLNznZB8hFDYnNDmSL3spB9F<br clear="none">mxHYZ4BVlDTlMLi4qHf05mrpsdEodrhF9A3H8YmzXLWHx5sxyukLfR/R7UJlP14K<br clear="none">S9xZa3KhKE/SERNM8iwPggNdtzdjrBhs6U2AUhmpeNjEgEiOgkgT7XRm724hMj21<br clear="none">9CH5kgGt4qiE5plPfSqTdyiJSBbQF5NL50g8/NSrQ4bRilTD9Fdf+kVRoSnscrAF<br clear="none">ViQKzc5L8s+3YMmVmXyynM0s4YPy5bj9Qgqi5nWjQG9gSBRLeedsyK1rdlcQmbQ=<br clear="none">=CQHA<br clear="none">-----END PGP SIGNATURE-----<br clear="none">_______________________________________________<br clear="none">squid-users mailing list<br clear="none"><a rel="nofollow" shape="rect" ymailto="mailto:squid-users@lists.squid-cache.org" target="_blank" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br clear="none"><a rel="nofollow" shape="rect" target="_blank" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><div class="yiv5880871692yqt8922795373" id="yiv5880871692yqtfd44929"><br clear="none"></div><br clear="none"><br clear="none"></div> </div> </div> </div></div> </div></div></div></div></body></html>