Re: [squid-users] squid parent proxy filter problem

From: Henrik Nordstrom <hno@dont-contact.us>
Date: 21 May 2003 12:48:15 +0200

ons 2003-05-21 klockan 12.34 skrev Warren Togami:

> http://www.squid-cache.org/Doc/FAQ/FAQ-4.html
> Section 4.8 and 4.9 of this document describes a method to force all
> connections to go to another proxy, but it doesn't seem to work. Rather
> than requests going through the parent proxy, they go directly to the
> Internet.
>
> I have the following within my squid.conf:
>
> acl campusnetwork src 192.168.0.0/24
> cache_peer localhost parent 8080 0 no-query default
> cache_peer_access localhost allow campusnetwork
> http_access allow campusnetwork
> always_direct allow campusnetwork
> never_direct allow all

I do not think your always_direct rule is what you want.. it says that
any requests from clients with IP addresses 192.168.0.0/24 must be sent
directly by Squid, bypassing your peer..

I think you actually want something like the following configuration:

acl campusnetwork src 192.168.0.0/24
http_access allow campusnetwork

cache_peer localhost parent 8080 0 no-query default
[no cache_peer_access rule..]

acl campusservers dst 192.168.0.0/24
always_direct allow campusservers
never_direct allow all

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Wed May 21 2003 - 04:48:23 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:49 MST