Re: ICP_QUERY yes - TCP no

anttia@raita.oulu.fi writes:

> I'm running Squid on two machines. Machine is the primary (parent)
> outgoing www-traffic cache. The other one acts as a PPP server with
> IP Masq and IP-addresses from 192.168.x.x (not _real_ IP-addresses,
> u know).
>
> I'd like to restrict the traffic of some of the address classes
> used. It's possible by configuring PPP server's Squid - it is the
> only machine that sees the real address of PPP clients. The question
> is, how do I configure the primary www-cache so that it allows the
> secondary cache machine to act as it's children cache, but not as a
> www client?

The caches transfer objects between themselves using HTTP, so you
must enable 'http_access' for the child cache.

ICP is just a query protocol used to locate the objects.

> If I put like this:
> http_access deny the_second_cache
> http_access allow all
>
> icp_access allow all
>
>
> .. it doesn't work. "TCP_DENIED".
>
> Can you help me please?
>
> Antti
>

Duane W.
Received on Tue Nov 12 1996 - 16:14:26 MST