[SQU] Transparent caching for solaris and use of wccp

Hi,
I try to use squid-2.3.STABLE2 with a SUN solaris 2.7 in transparent mode.
squid works fine on its classical port 3128 but i cannot use it transparently for the client
browser.I would like not to be obliged to change configurations of my inside clients.

I installed ip_fil3.3.18-sol7-64.pkg and configured squid properly with --enable-ipf-transparent
I let my http_port in squid.conf to 3128

/etc/init.d/ipfboot installed by the package ip filter seems not to launch ipf or ipnat correctly
# /etc/init.d/ipfboot start
Set 0 now inactive <---- ipf
0 entries flushed from NAT table <---- ipnat
0 entries flushed from NAT list

* Where can i find any example of ipf.conf. Mine is empty for the moment
My ipnat.conf:
rdr hme0 a.b.c.d port 80 -> a.b.c.d port 80 tcp
rdr hme0 0.0.0.0/0 port 80 -> a.b.c.d port 3128 tcp
where a.b.c.d is the address of squid machine

* How can i know if ipf and ipnat are ok?

* Are they able to catch packets encapsulated by my cisco router

* What type of redirection would you use?
On my side, i use a cisco router with wccp which sees the neighbour cache squid and forwards the
http requests in a tunnel mode to squid machine. Packets are correctly arriving on my squid machine
but are encapsulated (tunnel mode) and ipf or ipnat does not catch them,it seems.

WCCP Web-Cache information:
        IP Address: a.b.c.d
        Protocol Version: 0.4
        State: Usable
        Initial Hash Info: 00000000000000000000000000000000
                               00000000000000000000000000000000
        Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                               FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Hash Allotment: 256 (100.00%)
        Packets Redirected: 7
        Connect Time: 06:32:53

Any help would be greatly appreciated.
Many thanks.

-- 
Dominique Le Brun		            
	IFREMER - Centre de Brest - TMSI/IDM/RIC
	BP 70 - 29 280 Plouzane - FRANCE
	Telephone: +33 (0) 2 98 22 46 01 - Fax: +33 (0) 2 98 22 45 46
	Web: http://www.ifremer.fr
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html