Re: MAC addess in ACL

Hmm.. looks fine.

Are you on the same LAN segment as the proxy, or might there be a router
inbetween you and the proxy? ARP (MAC address) ACL's only work for the
same LAN segment as the proxy.. If on another network segment then all
traffic will be coming from the router MAC address.

There was an issue with the support for Linux kernel 2.2 in earlier
Squid version, but this is supposed to be fixed in Squid-2.3.

You should get some interesting debug information if you add 28,4 to the
debug_options line in squid.conf. For example you should get

   ... Looking ip ARP address for 10.0.0.30 on eth0
   ... Got address 00:08:c7:9f:34:41
   ... aclMatchArp: 10.0.0.30 found on eth0

--
Henrik Nordstrom
Squid hacker
Rostislav Vavilov wrote:
> 
> SQUID 2.3 STABLE2
> LINUX
> kernel 2.2.14
> 
> > > I have next string in my squid config file:
> > >
> > > acl all src 0.0.0.0
> > > acl pl800_arp arp 00:08:c7:9f:34:41
> > > http_access allow pl800_arp
> > > http_access deny all
> > >
> > > past squid -k reconfigure
> > > I have "Access Denied" message from 10.0.0.30 (00:08:c7:9f:34:41).