Re: [squid-users] Initial webpage before surfing on squid

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Fri, 17 Apr 2009 13:27:37 +1200

Chris Robertson wrote:
> Jorge Bastos wrote:
>>> Whoops. Try...
>>>
>>> external_acl_type session ttl=14400 negative_ttl=0 children=1
>>> concurrency=200 %SRC /usr/lib/squid3/squid_session -t 14400
>>>
>>
>> Well, seems to be working fine now :)
>> The only problem is that I get a "access denied" on every first access on
>> each machine.
>> My conf:
>>
>> external_acl_type session ttl=14400 negative_ttl=0 children=1
>> concurrency=200 %SRC /usr/lib/squid3/squid_session -t 14400
>> acl session external session
>> ##acl A dstdomain 195.23.114.74
>>
>
> acl A dst 195.23.114.74 # Using an IP address in a dstdomain acl doesn't
> make sense to me*...

Unless the URL is specified as http://195.23.114.74/ ...
dstdomain is textual comparison first, rDNS comparison second.

Amos

>
>> ##acl B urlpath_regex /inicial.php
>> ##http_access allow A B
>> http_access deny !session
>> deny_info http://195.23.114.74/inicial.php?url=%s session
>>
>> the lines that are commented were suggested by Amos, but even if I
>> uncomment
>> them, I still get the access denied on the first access, instead of the
>> "deny_info" I've provide.
>>
>> What am I missing here?
>>
>>
>>> It's based on whatever you send to it. In my initial suggestion, I
>>> used
>>> the URI as the key. I forgot that we really only need to send the
>>> requested URI to the deny_info page.
>>>
>>
>> Well I understood this part clearly now, I also saw now that this
>> variables
>> are on my squid.conf, and understood them.
>>
>
> Excellent.
>
>>>> For the session, there's any tool that I can see the active sessions
>>>>
>>> and the
>>>
>>>> rest of information about them, ETA time etc etc?
>>>>
>>>>
>>> Probably not. But you have the source to the helper, so perhaps you
>>> can commission such a tool...
>>>
>>
>> Well will take a look after this is working fine :)
>>
>> Jorge,
>>
>
> Chris
>
> * But Amos is a genuine Squid maintainer, so maybe it does make sense
> from a code perspective. :o)

:)

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE14
   Current Beta Squid 3.1.0.7
Received on Fri Apr 17 2009 - 01:27:42 MDT

This archive was generated by hypermail 2.2.0 : Fri Apr 17 2009 - 12:00:02 MDT