We have Squid running an ACL that lists allowed domains for users to access
the Internet. Only these sites, listed in a simple text file, can access
the Internet. Pretty simple and has been running normally for over 18
months. Here's the config section:
# Agencies & stealth thingys
acl stealth dstdomain "/opt/squid/etc/stealth.txt"
acl stealthhost dst "/opt/squid/etc/stealthhost.txt"
# We should never need this, but...
acl stealthaddr dst "/opt/squid/etc/stealthaddr.txt"
Sites allowed for all
http_access allow stealth
http_access allow stealthhost
http_access allow stealthaddr
Today, with no configuration changes anywhere, Squid decided to only server
some of the allow domains and not others. The access.log showed the sites
as, example only;
1004390409.231 2 x.x.x.x TCP_DENIED/403 990 GET
http://www.qantas.com.au/index.html - NONE/- -
This site is in the list for access.
Checked the cache.log which showed no problems.
Four file systems hold the cache and one is 100%, don't know why, but will
investigate that one.
I simply stopped Squid, which stopped almost immediately, which is odd, and
started Squid again and all was well.
What could be the problem there??
Any ideas would be greatfully taken on board.
Received on Mon Oct 29 2001 - 16:10:46 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:03:11 MST