Re: [squid-users] Squid exitin periodicaly ( Preparing for shut down after )

From: Chris Robertson <crobertson_at_gci.net>
Date: Tue, 17 Mar 2009 11:57:39 -0800

twinturbo_at_f2s.com wrote:
> #17.19 is my old workstation IP, nothing is on this now
> #16.2 used to be the ip of the squid server not used anymore
>
> acl netmgr src 10.106.17.19/255.255.255.255 10.106.16.2/255.255.255.255
> acl manager proto cache_object
> acl localhost src 127.0.0.1/255.255.255.255
> {config cut}
>

What got cut? Any http_access lines?

> http_access allow localhost
> http_access allow manager netmgr localhost
>

This acl reads "Allow requests using the cache_object protocol if they
have a source of 10.106.17.19 or 10.106.16.2 and they have a source of
127.0.0.1". Since no request can have a source of two different IP
addresses (that I know of at least) this limits manager access to
localhost (which is allowed to do anything by the http_access line above).

> http_access deny all
>

There must be more http_access lines. Otherwise your proxy wouldn't be
usable (unless Squid is a parent for another service on the same box).

> Cheers
>
> Rob

Chris
Received on Tue Mar 17 2009 - 19:57:50 MDT

This archive was generated by hypermail 2.2.0 : Wed Mar 18 2009 - 12:00:02 MDT