[squid-users] acl of type dstdomain and CONNECT not working together with dstdomain?

From: Kinkie <kinkie-squid@dont-contact.us>
Date: Tue, 01 Jun 2004 17:22:04 +0200

Hi all, I'm having a puzzling experience with 2.5.STABLE4-20040218:

I have a setup like:

acl ports port 443
acl domains dstdomain .foo.com
acl CONNECT method CONNECT

http_access allow CONNECT ports domain
http_access deny all

When I try to connect to www.foo.com I get a denied access.

When on the other hand I do (1.2.3.4 is www.foo.com's address)

acl ports port 443
acl hosts dst 1.2.3.4
acl CONNECT method CONNECT

http_access allow CONNECT ports hosts
http_access deny all

I do get access.

Is there any kind of incompatibility between CONNECT and dstdomain?

Thanks for any advice.

-- 
	kinkie (kinkie-squid [at] kinkie [dot] it)
	Random fortune, unrelated to the message:
To err is human; to forgive is simply not our policy.
		-- MIT Assasination Club
Received on Tue Jun 01 2004 - 09:22:10 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Jul 01 2004 - 12:00:02 MDT