Re: [squid-users] ACL dstdomain not working

From: Luca Gervasi <luca.gervasi@dont-contact.us>
Date: Tue, 11 Mar 2008 12:26:40 +0100

Thanks for your kind answer. I tried to apply what you said in your
previous message as follow:

cache_peer MY_PARENT_PROXY parent 3128 0 no-query proxy-only default

acl to_parent dstdomain .ieee.org .acm.org

cache_peer_access MY_PARENT_PROXY allow to_parent.

What i got is:

MY_IP TCP_MISS/200 [...] DIRECT/140....

...parent proxy got untouched at all :(

Anyone?

Thanks in Advance.

Luca

On Tue, Mar 11, 2008 at 10:41 AM, Henrik K <hege@hege.li> wrote:
> On Tue, Mar 11, 2008 at 10:32:49AM +0100, Luca Gervasi wrote:
> > Hello,
> > i'm pretty new to squid. I installed it for the first time in a lab
> > which needs to access to some specific domains through a parent proxy,
> > using direct connection for all the requests.
> >
> > I setup Squid Cache: Version 2.6.STABLE16, on Fedora 8, adding those commands:
> >
> > cache_peer MY_PARENT_PROXY parent 3128 0 no-query proxy-only default
> >
> > acl ieee dstdomain .ieee.org
> > acl acmorg dstdomain .acm.org
> >
> > cache_peer_access MY_PARENT_PROXY allow ieee acmorg
> > cache_peer_access MY_PARENT_PROXY deny all
>
> http://wiki.squid-cache.org/SquidFaq/SquidAcl#head-af2c190759b099a7986221cd12a4066eb146a1c4
>
> Thus:
>
>
> cache_peer_access MY_PARENT_PROXY allow ieee
> cache_peer_access MY_PARENT_PROXY allow acmorg
>
> cache_peer_access MY_PARENT_PROXY deny all
>
> Or more simply:
>
> acl to_parent dstdomain .ieee.org .acm.org
> cache_peer_access MY_PARENT_PROXY allow to_parent
>
>
> cache_peer_access MY_PARENT_PROXY deny all
>
>

-- 
GnuPG / PGP Key Available on http://pgp.mit.edu
KeyID: 0x17E179AA - Key Fingerprint:
6594 0AEB 13E9 7CA5 EBF7 FCF7 E201 1E6F 17E1 79AA
Linux Registered User: #192634
Web: http://www.ashetic.net/wordpress/
Received on Tue Mar 11 2008 - 05:26:43 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Apr 01 2008 - 13:00:05 MDT