Re: [squid-users] Multiple src networks

From: Colin Campbell <sgcccdc@dont-contact.us>
Date: Tue, 11 Dec 2001 10:42:58 +1000 (EST)

Hi,

On Tue, 11 Dec 2001, Greg Darby wrote:

> I have an WAN which requires 5 remote sites to use the central Squid proxy
> server (1) and are unsure how to setup the acl to allow the different IP
> ranges from all remote sites.
>
> Do i use the following ?
>
> acl site1 src 131.121.0.1-131.121.0.50/255.255.255.0
> acl site2 src 132.121.0.1-132.121.0.40/255.255.255.0
> acl site3 src 192.168.10.1-192.168.10.50/255.255.255.0
> acl site4 src 172.16.1.1-172.16.1.10/255.255.255.0
> acl site5 src 171.16.1.1-171.16.10.20/255.255.255.0

I think you need to lose the netmasks. They'll mask off the bits you're
trying to keep.

> http_access allow site1
> http_access allow site2
> http_access allow site3
> http_access allow site4
> http_access allow site5
> http_access deny all

Looks fine.

>
> Also, how can you force Squid to not cache specified websites and force the
> client to go direct?

You probably want "no_cache" to not cache specified websites. You cannot
make squid force the client to do anything. You must configure the client.
You can use PAC (and other) files or configure the clients manually.

Colin
Received on Mon Dec 10 2001 - 17:43:15 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:05:18 MST