Re: [squid-users] squid 2.4s1 acl and domain question

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 31 May 2001 10:21:22 +0200

David Meleedy wrote:

> acl INSIDE dstdom_regex \*.analog.com
> acl CORP dstdomain proxy.corpnt.analog.com

Why dstdom_regex? (any no, that is not a proper regex and cannot match a
valid host name)

I think you want a dstdomain ACL type there

acl INSIDE dstdomain .analog.com

> always_direct allow INSIDE !CORP
> never_direct deny INSIDE !CORP
> never_direct allow all

Should work, but it is perhaps simpler to write

always_direct deny CORP
always_direct allow INSIDE
never_direct allow all 

--
Henrik Nordstrom
Squid Hacker
Received on Thu May 31 2001 - 02:37:40 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:00:21 MST