Re: [squid-users] ACLs when using accelerator mode ?

From: Maarten J H van den Berg <maarten@dont-contact.us>
Date: Tue, 11 Jun 2002 20:38:46 +0200

On Tuesday 11 June 2002 19:44, Henrik Nordstrom wrote:
> Maarten J H van den Berg wrote:
> > > I.e. something like the following:
> > >
> > > acl to_myservers dst ip.of.accelerated.servers ...
> > > acl from_mynetworks src local.client.networks...
> >
> > Thus, that becomes, for my case:
> > acl myhost dst 10.0.0.9/255.255.255.255
> > acl all src 0.0.0.0/0.0.0.0
>
> Nope.. if you are not running as a proxy then you do not have LOCAL
> client networks and leave that part out.. My answer above is how to
> make a config running both as an accelerator and as a proxy. If you are
> just running a accelerator then the rules becomes:
>
> acl myserver dst 10.0.0.9
> acl http protocol HTTP
> acl port_80 port 80
>
> http_access allow http port_80 myserver

Ah ! So just leave it out completely ?
Thanks, that seems to work just perfect. :-)

> anything not matching this will continue down to the final
>
> http_access deny all
>
> which you should have left where it was in the default config.

Which I, of course, did. ;-)

Thank you for clearing that up !
Greetings,
Maarten

-- 
Maarten J. H. van den Berg   ~~//~~   network administrator
VBVB  -  Amsterdam  -  The Netherlands  -  http://vbvb.nl  
T +31204233288   F +31204233286   G +31651994273
Received on Tue Jun 11 2002 - 12:17:21 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:38 MST