Re: [squid-users] routing OR different IP address

When last was it updated?

> http://squid.sourceforge.net/cgi-bin/diff/rvenning_tosaddracl
>
> Author: Roger Venning
> No public web site, or project description yet apart from the
> documentation added to squid.conf.
>
> --
> Henrik Nordstrom
> Squid Hacker
>
>
> Edward wrote:
> >
> > Hi Henrik!
> >
> > Can you please provide me with the link for rvenning_tosaddracl?
> >
> > Thank you very much.
> >
> > Best regards,
> >
> > Edward Millington
> > (Network Administrator & Senior Technical Support Technician)
> > Cariaccess Communications Ltd.
> > Bridgetown
> > Barbados
> > 1-246-430-7435
> > Fax : 1-246-431-0170
> > edward@cariaccess.com
> > www.cariaccess.com
> > ----- Original Message -----
> > From: "Henrik Nordstrom" <hno@hem.passagen.se>
> > To: "Edward" <edward@cariaccess.com>
> > Cc: "squid" <squid-users@squid-cache.org>
> > Sent: Sunday, May 06, 2001 3:51 PM
> > Subject: Re: [squid-users] routing OR different IP address
> >
> > > Edward wrote:
> > >
> > > > I have the a policy route to the cache on one ip address.
> > > >
> > > > eg
> > > > access-list 110 deny tcp any any neq www
> > > > access-list 110 deny tcp host 200.50.68.7 any
> > > [...]
> > > > The other IP is 64.110.11.2.
> > > >
> > > > As you can see here, the ciso is only sending to the 200.50.68.7.
> > > >
> > > > What I believe here, after sending you that email, 64.110.11.2 is
not
> > > > getting pass the router faste0/0 interface.
> > >
> > > Correct. Your Cisco does not know that 64.110.11.2 should not be
> > > redirected to 200.50.68.7.
> > >
> > > I seem to remember that your clients is actually on different subnets
> > > than your servers. In such case it is probably better to reverse the
> > > router ACL to tell what should be redirected rather than what should
> > > not. I.e. only redirect your client networks to the proxy.
> > >
> > > > If that is the case then I will have to add
> > > >
> > > > access-list 110 deny tcp host 64.110.11.2 any
> > > >
> > > > to the access-list.
> > > >
> > > > What do you think Henrik?
> > >
> > > Not a Cisco expert, but it looks like a step in the correct direction.
> > >
> > > --
> > > Henrik Nordstrom
> > > Squid Hacker
> > >
>
>
Received on Wed May 09 2001 - 17:14:50 MDT