John, > Can you run tcpdump on the path twixt up2date box and Red Hat's site and see > what the traffic is? > > On my LAN my squid proxy is on 9.4 but 9.1 or even 7.253 are on the path out > and see traffic 9.4 doesn't so in my case those would be on the path whether > the proxy's used or not. > > A good alternative to tcpdump in your case is strace. > > strace -f -q -o poxy-trace <more options> -e trace=<stuff> up2date etc Thank you for this extra suggestion, but one of your colleagues solved the problem earlier: the consolehelper bug that strips out the proxy information when up2date is called in an 'su' context without explicitly specifying the full path. Jonathan