[squid-users] Problems getting delay pools to work with ident

From: John Nielsen <jrn@dont-contact.us>
Date: Wed, 20 Aug 2003 07:34:03 +0200

I am having trouble getting delay pools to work with ident...

I am running Squid-2.5.STABLE3 on OpenBSD 3.3
Clients are running Windows 98 with Identd
(from identd.sourceforge.net)

I have the following in my squid.conf

acl allowed_hosts src 10.0.0.0/24
acl good_guys ident_regex -i laerer
acl bad_guys ident_regex -i kursist
acl bad_files urlpath_regex -i .exe .mp3

delay_pools 3
delay_class 1 2
delay_class 2 1
delay_class 3 2
delay_parameters 1 65536/65536 -1/-1
delay_parameters 2 4096/4096
delay_parameters 3 65536/65536 8192/16384
delay_access 1 allow good_guys
delay_access 1 deny all
delay_access 2 allow bad_files
delay_access 2 deny all
delay_access 3 allow allowed_hosts
delay_access 3 deny all

The idea is to allow good_guys full bandwidth no matter what,
while limiting everyone else when downloading bad_files, though
allowing them decent surf-speed...

No matter who is logged on, the delay_access 3 rule is chosen!

If good_guys starts downloading bad_files, the delay_access 2
rule is chosen!

Both the good_guys and bad_guys acl works perfectly everywhere
else...(e.g. http_access, reply_body_max_size...)

If I change the good_guys and bad_guys acl's to use the src
acltype instead of ident, the delay_access rules works perfectly.

What am I doing wrong?
Received on Tue Aug 19 2003 - 23:30:36 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:19:00 MST