RE: [squid-users] Problem with dstdomain

From what I can gather, you can't mix domain names and IP addresses in a
dstdomain acl.
I suggest you try something like this:

acl all src 0.0.0.0/0.0.0.0
acl surf_small src 172.27.18.19/32
acl erlaubte_domain dstdomain "/usr/local/squid/etc/erlaubt.url"
        # - remove the IP address from this file
acl erlaubte_IP dst 149.239.160.196
...
http_access allow surf_small erlaubte_domain
http_access allow surf_small erlaubte_IP
http_access deny all
...

Hope it works!

Winston

-----Original Message-----
From: Nicole Haehnel [mailto:Nicole.Haehnel@epost.de]
Sent: Wednesday, October 31, 2001 5:21 AM
To: Squid
Subject: [squid-users] Problem with dstdomain

Schöner TagHi,
we're having a problem with dstdomain and http_access.
We only allow some domains to be accessed by the users,
but if we want to allow an ip address instead of a domain name
it's not working anymore.

Here is a part of our squid.conf:

acl all src 0.0.0.0/0.0.0.0
acl surf_small src 172.27.18.19/32
acl erlaubte_seiten dstdomain "/usr/local/squid/etc/erlaubt.url"
http_access allow surf_small erlaubte_seiten
http_access deny all

Our erlaubt.url looks like this:

www.umwelt-online.de
www.umwelt.hessen.de
149.239.160.196

Why do users get denied, if they try to access the ip?

Thanks
Nicole
Received on Wed Oct 31 2001 - 14:50:37 MST