Re: [squid-users] understanding 'no_cache'

From: Sam Carleton <sam@dont-contact.us>
Date: Tue, 7 Jan 2003 09:43:22 -0500

On Tue, Jan 07, 2003 at 05:41:26AM +0100, Henrik Nordstrom wrote:
> Sam Carleton wrote:
>
> > Henrik,
> >
> > I am trying to exluce my servers from being cached when
> > accessed by my clients.
> >
> > I would LOVE to know how to exclude the server network from the
> > redirection, but don't have a clue as to how to do that If my
> > understanding if the ipnat rule is correct, it is redirecting
> > anything neading for the gateway on the 192.168.0.0/24 (ex0)
> > network. The servers are only accessable through that gateway.
> >
> > How do I write a ipnat rule that excludes traffic heading to the
> > 172.16.0.0/24 (ex1) network?
>
> I am not a IP Filter user and don't know the details of ipnat syntax,
> but generally yes. Generally to exclude things from redirection one
> inserts a rule prior to the redirection rule accepting the traffic
> without redirection.
>
> You might also be able to refine the redirection rule to say "redirect
> anything but my servers".
>
> See the ipnat documentation for your system.
>
> At a quick glance at the ipnat documentation the following might work
>
> map ex0 from any to your.server.network/mask ->
> your.server.network/mask
> rdr ex0 0/0 port 80 -> 192.168.0.1 port 3128 tcp

Henrik

I guess my problem comes from understanding TCP/IP in general.
I know I should read up on it, but then there are a lot of
things most folks should do and don't:)

After writing how I thoght it work, it sounded totally
rediculuos! For some strange reason I thought that the
originating machine would have to "rap" the destination ip
address in a packet which had a destination of the gateway.
Where the truth is, if I am not mistaken, TCP/IP gets the MAC
address of the gateway and at layer one sends the packet with
the correct destination to the NIC of the gateway.

Man, have you ever had one of those moments where you felt
like dirt knew more then you did? I seem to be having a lot
of those lately:)

Thanks!

Sam
Received on Tue Jan 07 2003 - 07:43:30 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:12:29 MST