I am trying to implement a transparent proxying solution with FC3, Squid, and Cisco Routers (via WCCP/GRE) and am having problems getting the Cisco Router to talk with my squid box. Per Jeremy Garcia's excellent article in Linux Magazine, I have checked that my updated stock FC3 kernel (2.6.11-1.14_FC3smp) has packet filtering, connection tracking, IP tables support, full network address translation (NAT) and REDIRECT target support enabled in the kernel (loadable modules0. The article also states that FAST Switching must be set to NO.

I have looked for Fast Switching in my .config, in make menuconfig, and googling, but have not seen anything as far as configuring it in FC3 or 2.6 kernels. Does anyone have any ideas how I can set/check the Fast Switching setting?

I know the box functions well as a normal proxy, however the transparent part of this is what I am having a difficult time getting to work -- more specifically the wccp connection.

viewing my iptunnel gives:
gre0: gre/ip remote any local any ttl inherit nopmtudisc
sit0: ipv6/ip remote any local any ttl 64 nopmtudisc
gre1: gre/ip remote 192.168.1.1 local 192.168.1.200 dev eth0 ttl inherit

lsmod shows ip_gre, ipt_REDIRECT, iptables_nat, and other modules

I am using the a 2.6.11 kernel so I do nit believe I have to run the ip_wccp patch.

netstat -i gives:
[root@squid2 ~]# netstat -i
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0 1500 0 679078 0 0 0 1326781 0 0 0 BMRU
gre1 1476 0 0 0 0 0 1 0 0 0 OPRU
lo 16436 0 7 0 0 0 7 0 0 0 LRU

which looks like only 1 TX-OK packet has been transmitted????


Help!