separate Intranet and Internet sites

From: CHAU Man-Hau <chaumh@dont-contact.us>
Date: Fri, 21 Jul 2000 09:59:40 +0800

hi all, here is the architecture of our site:

                   Intranet
    ______________________________________
   / \
  Squid server <------> Another Proxy Server <---> Internet

We've set all broswers pointing to the Squid server, what we
want is to make the Squid server be able to decide whether
the requesting web page is local or in the Internet. And do
the appropriate action subsequently.

The reason for not letting broswers to separate the sites
themselves is that some local web servers have IP filtering
and they only allow the Squid Server to visit.

so, can it be done ?
here is our trial code:

----- beging of code --------

acl foo proxy_auth REQUIRED ## authentication by Squid
http_access allow foo

acl CCIS url_regex ^http://123.12.1.123/mdx ## the first site
always_direct allow CCIS

acl HKMO url_regex ^http://abc.xyz ## the second site
always_direct allow HKMO

## point to the proxy server to go outside
cache_peer 180.19.7.241 parent 8080 0 no-query default
acl all src 0.0.0.0/0.0.0.0
never_direct allow all

---- end of code -----

the first and second site are local (Intranet).

What surpised me is that it does work for the first
site (but I don't know why !) while the second one
doesn't (of course, I don't know why it's so, too).

Is there something wrong ?

Many many thanks for your attention to such a long mail.

Regards,
Chau.
Received on Thu Jul 20 2000 - 20:03:21 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:54:34 MST