From owner-freebsd-stable  Mon Feb  4 15:10:58 2002
Delivered-To: freebsd-stable@freebsd.org
Received: from mail.27in.tv (roc-66-24-112-7.rochester.rr.com [66.24.112.7])
	by hub.freebsd.org (Postfix) with ESMTP id 5A9AA37B42A
	for <stable@freebsd.org>; Mon,  4 Feb 2002 15:10:34 -0800 (PST)
Received: (from root@localhost)
	by mail.27in.tv (8.11.6/8.11.6) id g14NAVp03482;
	Mon, 4 Feb 2002 18:10:31 -0500 (EST)
	(envelope-from cjm2@earthling.net)
Received: from maxpower (maxpower.lan.27in.tv [10.0.0.254])
	by mail.27in.tv (8.11.6/8.11.6av) with SMTP id g14NATh03468;
	Mon, 4 Feb 2002 18:10:29 -0500 (EST)
	(envelope-from cjm2@earthling.net)
From: "C J Michaels" <cjm2@earthling.net>
To: "Greg Prosser" <greg@straynet.com>
Cc: <stable@freebsd.org>
Subject: RE: dropping 127.* on the floor
Date: Mon, 4 Feb 2002 18:10:36 -0500
Message-ID: <CDEJIONOMGKHCNHBALKPAEJICAAA.cjm2@earthling.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal
In-Reply-To: <20020204100307.F12914-100000@voyager.straynet.com>
X-Virus-Scanned: by AMaViS perl-11
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

From: Greg Prosser
Sent: Monday, February 04, 2002 10:07 AM
Subject: Re: dropping 127.* on the floor
>
>
<...snip...>
> According to the squid FAQ[1], they recommend using ipfw fwd rules
> diverting traffic to 127.0.0.1 to transparently insert the cache server.
> This behaviour is now broken, as ipfw rewrites the packet before it hits
> the network stack, as does ipf, and both end up dropped.  I've tested and
> confirmed this on 4.5-STABLE, the rules in the FAQ did not work for me.

Does squid's transparent proxying depending upon the packet being forwarded
to the loopback?  or can we just re-write the rule to push it down one of
the other interfaces?

>
> -gnp
>
> [1] squid FAQ URL: http://www.squid-cache.org/Doc/FAQ/FAQ-17.html#ss17.8

--Chris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message