Re: [squid-users] ACL problem

On Thursday 08 December 2005 11:04, Marc-Christian Petersen wrote:
> acl denydoms dstdomain .a.de
> acl denynets dst 255.0.0.0/32

255.0.0.0/32 (which equals 255.0.0.0) is not IP address I have ever seen.

> acl privhosts src localhost
> acl denyregex url_regex \.unknowntld$
> acl denydoms dstdomain "/opt/alice/etc/proxy.doms"
> acl denynets dst "/opt/alice/etc/proxy.ips"
> acl privhosts src "/opt/alice/etc/proxy.priv"
> acl denyregex url_regex -i "/opt/alice/etc/proxy.regex"
> http_access allow privhosts
> http_access deny denydoms
> http_access deny denynets
> http_access deny denyregex
> http_access allow users
> http_access deny all
> deny_info ERR_DENYDOMS denydoms
> deny_info ERR_DENYNETS denynets
> deny_info ERR_DENYREGEX denyregex
>
> everything of this works except http_access allow privhosts.

Why do you define the "pivhosts" ACL twice?

> proxy.priv content is this:
>
> 10.130.10.100
> 10.130.10.109
>
> Also tried specifying netmask as in 255.255.255.255 or /32, did not
> work.
>
> Tried also doing:
>
> acl privhosts src 10.130.10.100/255.255.255.255 and it won't work also.
> Turned on full debugging and cache.log tells me that above ip is not
> matching at all.
>
> Any idea? I had squid 2.5stable1 or so running and it worked, now
> updated to 2.5stable12 and it won't. Anything changed?

You don't tell what problem you have exactly.

 Christoph

-- 
~
~
".signature" [Modified] 2 lines --100%--                2,41         All