Re: [squid-users] Re: Access control problem

On 10/11/10 05:15, mrmmm wrote:
>
>
> Amos Jeffries-2 wrote:
>>
>> Your initial message said "among other stuff I have". The conclusion
>> then has to be that somewhere in that other stuff is http_access rules
>> which bypass the ones you mentioned here.
>>
>> Amos
>> --
>>
>
> By "other stuff" i mean specific deny entries.

*all* of them? not one single "http_access allow" somewhere up top?

> Most of them are of type "URL
> Regexp" and have just one entry per rule, and they work fine. It seems that
> the problem is that for some reason when I have multiple entries per rule (a
> file with a list of sites) it is not denying them properly. However, it does
> appear that Squid reads them because I put a couple of duplicates in the
> file (on purpose) and when squid loads I get the message:
>
> WARNING: '.resize.yandex.net' is a subdomain of 'resize.yandex.net'
> WARNING: because of this 'resize.yandex.net' is ignored to keep splay tree
> searching predictable
> WARNING: You should probably remove '.resize.yandex.net' from the ACL named
> 'denybadsites'
>

oooh. You were talking about regex ACL not working then provide an
example of a dstdomain error. Mixing or crossing patterns could be the
source of your failure.

What is your *full* config please? along with the output of "squid -v"

Amos

-- 
Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.9
   Beta testers wanted for 3.2.0.3