always_direct not working

Hi. I'm having difficulty with generating a "always_direct"
setup with Squid. I have Squid 2.2.STABLE4 running cleanly as
siblings on two Sun Sparc boxes running Solaris 7. Together
they're serving about 3500 end users, including ad redirectors.

We have some sort of refresh problem with stuff coming from an
external site, www.sctu.com, so I attempted an always_direct for
that site, per the instructions in the FAQ and squid.conf. My
intent is for Squid to never offer cached content for anything
under www.sctu.com. I only have two acls defined in my
squid.conf, one to allow everyone to hit the proxy and the other
to force direct to www.sctu.com. Watching the cache.log file, I
can see that the acl is being matched, but even if I squid -z I
still end up getting cached hits for www.sctu.com.

Anyone have an idea where I'm going wrong?

Thanks.

Jeff Dean
SCT Corp

=================================
...from squid.conf...

# allow unlimited access to the proxy
acl all src 0.0.0.0/0.0.0.0
http_access allow all
icp_access allow all

# force direct to sctu to avoid refresh problem
acl sctu dstdomain www.sctu.com
always_direct deny all
always_direct allow sctu

=================================
...from cache.log...

1999/09/21 12:01:09| aclCheck: checking 'always_direct allow
sctu'
1999/09/21 12:01:09| aclMatchAclList: checking sctu
1999/09/21 12:01:09| aclMatchAcl: checking 'acl sctu dstdomain
www.sctu.com'
1999/09/21 12:01:09| aclMatchDomainList: checking 'www.sctu.com'
1999/09/21 12:01:09| aclMatchDomainList: 'www.sctu.com' found
1999/09/21 12:01:09| aclMatchAclList: returning 1
1999/09/21 12:01:09| aclCheck: match found, returning 1
1999/09/21 12:01:09| aclCheckCallback: answer=1
1999/09/21 12:01:11| aclCheckFast: list: 1b79b8
1999/09/21 12:01:11| aclMatchAclList: checking all
1999/09/21 12:01:11| aclMatchAcl: checking 'acl all src
0.0.0.0/0.0.0.0'
1999/09/21 12:01:11| aclMatchIp: '149.24.35.101' found
1999/09/21 12:01:11| aclMatchAclList: returning 1
1999/09/21 12:01:12| aclCheckFast: list: 1b79b8

=================================
...from access.log...

937918115.894 33 149.24.29.67 TCP_HIT/200 1668 GET
http://www.sctu.com/media/log01.gif - NONE/- image/gif
937918116.046 63 149.24.29.67 TCP_IMS_HIT/304 202 GET
http://www.sctu.com/media/log03.jpg - NONE/- image/jpeg
937918116.145 171 149.24.29.67 TCP_MISS/404 372 GET
http://www.sctu.com/media/log02.gif - DIRECT/www.sctu.com
text/html
937918116.364 317 149.24.29.67 TCP_MISS/404 372 GET
http://www.sctu.com/media/log04.jpg - DIRECT/www.sctu.com
text/html
937918116.764 3 149.24.29.67 TCP_HIT/200 381 GET
http://www.sctu.com/media/1pix.gif - NONE/- image/gif
937918116.794 28 149.24.29.67 TCP_HIT/200 3964 GET
http://www.sctu.com/media/sct_tagline2.gif - NONE/- image/gif
937918117.065 53 149.24.29.67 TCP_IMS_HIT/304 201 GET
http://www.sctu.com/media/mbar.gif - NONE/- image/gif
937918117.125 58 149.24.29.67 TCP_IMS_HIT/304 202 GET
http://www.sctu.com/media/log05.jpg - NONE/- image/jpeg
937918117.185 59 149.24.29.67 TCP_IMS_HIT/304 201 GET
http://www.sctu.com/media/mcour.gif - NONE/- image/gif
Received on Tue Sep 21 1999 - 11:31:17 MDT