Re: [squid-users] multiple acls with one tcp_outgoing_address, possible?

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Thu, 24 Apr 2003 07:42:00 +0200

On Thursday 24 April 2003 03.54, Adam wrote:
> Can multiple acl's be put on with "tcp_outgoing_address" directive

Yes, just as any other acl driven directive in squid.conf.

> and if so what is wrong with my syntax as it doesn't seem to work
> for me. Having one acl per line works, but we extract the
> non-comment lines and it would be neater for us to have the acl's
> for one tcp_outgoing_address on one line. Each acl is a line like
> this so they can't be made into one (can one make an acl of
> multiple acls?):
> acl VLAN1 src 192.168.20.0/255.255.255.0 (addresses made up)
>
> # this is what I want to do but it DOESNT work (the catch-all is
> used) tcp_outgoing_address 1921.168.3.10 adam1 VLAN1 VLAN2 VLAN3
> VLAN4 tcp_outgoing_address 1921.168.3.20 adam2 VLAN5 VLAN6 VLAN7
> VLAN8

This won't work because the request cannot come from all of the listed
acls at the same time. If you list multiple ACLs then ALL the listed
acls must be true for the address to be selected.

What you can do is to make bigger acls. The src acl accepts many
addresses.

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Wed Apr 23 2003 - 23:41:50 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:15:23 MST