[squid-users] RE:RE: [squid-users] maxconn don't work

In my squid.conf

http_access deny 4CONN baf
http_access deny all
why squid skip acl with my ip adress?

От: Robert Collins <robert.collins@itdomain.com.au>
Кому: ??????? ????????? <baf@unix2.asu.tusur.ru>;
squid-users@squid-cache.org <squid-users@squid-cache.org>
Дата: 25 июля 2001 г. 15:55
Тема: Re: [squid-users] maxconn don't work

>acls are tested in the order they appear in http_access lines, not the
order
>the acls are defined in.
>
>Rob
>----- Original Message -----
>From: "" <baf@unix2.asu.tusur.ru>
>To: <squid-users@squid-cache.org>
>Sent: Wednesday, July 25, 2001 5:52 PM
>Subject: [squid-users] maxconn don't work
>
>
>> Hi all!
>> I try limit number of connection to squid. In my squid.conf :
>> client_db on
>> .........
>> acl all src 0.0.0.0/0.0.0.0
>> acl manager proto cache_object
>> acl localhost src 127.0.0.1/255.255.255.255
>> acl baf src 192.168.62.126/255.255.255.255
>> acl 4CONN maxconn 4
>> http_access deny 4CONN baf
>>
>> when i try open 1 connect to squid, i get error page. In cache.log squid
>> write:
>>
>> 2001/07/25 15:26:54| Ready to serve requests.
>> 2001/07/25 15:26:56| aclCheckFast: list: 0x8204100
>> 2001/07/25 15:26:56| aclMatchAclList: checking all
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
>> 2001/07/25 15:26:56| aclMatchIp: '192.168.62.126' found
>>
>>
                                ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -
>> why?
>> 2001/07/25 15:26:56| aclMatchAclList: returning 1
>> 2001/07/25 15:26:56| aclCheck: checking 'http_access deny 4CONN baf'
>> 2001/07/25 15:26:56| aclMatchAclList: checking 4CONN
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl 4CONN maxconn 4'
>> 2001/07/25 15:26:56| aclMatchAclList: returning 0
>> 2001/07/25 15:26:56| aclCheck: checking 'http_access allow manager
>> localhost'
>> 2001/07/25 15:26:56| aclMatchAclList: checking manager
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl manager proto
>cache_object'
>> 2001/07/25 15:26:56| aclMatchAclList: returning 0
>> 2001/07/25 15:26:56| aclCheck: checking 'http_access deny manager'
>> 2001/07/25 15:26:56| aclMatchAclList: checking manager
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl manager proto
>cache_object'
>> 2001/07/25 15:26:56| aclMatchAclList: returning 0
>> 2001/07/25 15:26:56| aclCheck: checking 'http_access deny !Safe_ports'
>> 2001/07/25 15:26:56| aclMatchAclList: checking !Safe_ports
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl Safe_ports port 80
>> 2001/07/25 15:26:56| aclMatchAclList: returning 0
>> 2001/07/25 15:26:56| aclCheck: checking 'http_access deny CONNECT
>> !SSL_ports'
>> 2001/07/25 15:26:56| aclMatchAclList: checking CONNECT
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl CONNECT method CONNECT'
>> 2001/07/25 15:26:56| aclMatchAclList: returning 0
>> 2001/07/25 15:26:56| aclCheck: checking 'http_access deny all'
>> 2001/07/25 15:26:56| aclMatchAclList: checking all
>> 2001/07/25 15:26:56| aclMatchAcl: checking 'acl all src 0.0.0.0/0.0.0.0'
>> 2001/07/25 15:26:56| aclMatchIp: '192.168.62.126' found
>> 2001/07/25 15:26:56| aclMatchAclList: returning 1
>> 2001/07/25 15:26:56| aclCheck: match found, returning 0
>>
>> why squid skip acl : acl baf src 192.168.62.126/255.255.255.255?
>>
>> Thanks in advance
>>
>>
>
>
Received on Wed Jul 25 2001 - 02:08:02 MDT