From owner-freebsd-questions@FreeBSD.ORG  Wed Feb 15 00:35:29 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@FreeBSD.org
Delivered-To: freebsd-questions@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 60EAD16A420
	for <freebsd-questions@FreeBSD.org>;
	Wed, 15 Feb 2006 00:35:29 +0000 (GMT)
	(envelope-from alan@fromorbit.com)
Received: from thing1.auspcmarket.com.au (mail.fromorbit.com [203.31.169.65])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 118F243D45
	for <freebsd-questions@FreeBSD.org>;
	Wed, 15 Feb 2006 00:35:28 +0000 (GMT)
	(envelope-from alan@fromorbit.com)
Received: from [192.168.1.99] (unknown [192.168.1.99])
	by thing1.auspcmarket.com.au (Postfix) with ESMTP id AD4AE713F
	for <freebsd-questions@FreeBSD.org>;
	Wed, 15 Feb 2006 11:04:17 +1100 (EST)
From: Alan Garfield <alan@fromorbit.com>
To: freebsd-questions@FreeBSD.org
Content-Type: text/plain
Date: Wed, 15 Feb 2006 11:04:16 +1100
Message-Id: <1139961856.2781.59.camel@random.fromorbit.com>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3 (2.2.3-2.fc4) 
Content-Transfer-Encoding: 7bit
Cc: 
Subject: Weird ipf redirected traffic with WCCP
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 15 Feb 2006 00:35:29 -0000

Hey guys,

I wonder if you can help me figure out why my squid proxy never sees any
traffic on the loopback,3128

I've setup ipf to log everything and it appears after the redirection it
immediately gets spat out the ethernet interface to be lost in the
ether. Why on earth would the routing table / ipf doing that?? Squid
sees nothing and nothing appears on the loopback interface.

======

Feb 15 10:57:24 thing3 ipmon[296]: 10:57:24.071776 fxp0 @-1:-1 p
204.21.169.1 -> 204.21.169.66 PR gre len 20 (72) IN
Feb 15 10:57:24 thing3 ipmon[296]: 10:57:24.071791 gre0 @-1:-1 p
192.168.1.28,2147 -> 127.0.0.1,3128 PR tcp len 20 48 -S IN NAT
Feb 15 10:57:24 thing3 ipmon[296]: 10:57:24.071824 fxp0 @-1:-1 p
127.0.0.1,3128 -> 192.168.1.28,2147 PR tcp len 20 48 -AS OUT

======

Any ideas?

Thanks,
Alan.