On Tuesday 11 June 2002 19:44, Henrik Nordstrom wrote:
> Maarten J H van den Berg wrote:
> > > I.e. something like the following:
> > >
> > > acl to_myservers dst ip.of.accelerated.servers ...
> > > acl from_mynetworks src local.client.networks...
> >
> > Thus, that becomes, for my case:
> > acl myhost dst 10.0.0.9/255.255.255.255
> > acl all src 0.0.0.0/0.0.0.0
>
> Nope.. if you are not running as a proxy then you do not have LOCAL
> client networks and leave that part out.. My answer above is how to
> make a config running both as an accelerator and as a proxy. If you are
> just running a accelerator then the rules becomes:
>
> acl myserver dst 10.0.0.9
> acl http protocol HTTP
> acl port_80 port 80
>
> http_access allow http port_80 myserver
Ah ! So just leave it out completely ?
Thanks, that seems to work just perfect. :-)
> anything not matching this will continue down to the final
>
> http_access deny all
>
> which you should have left where it was in the default config.
Which I, of course, did. ;-)
Thank you for clearing that up !
Greetings,
Maarten
-- Maarten J. H. van den Berg ~~//~~ network administrator VBVB - Amsterdam - The Netherlands - http://vbvb.nl T +31204233288 F +31204233286 G +31651994273Received on Tue Jun 11 2002 - 12:17:21 MDT
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:08:38 MST