Re: [squid-users] ACL and http_access Confusion

From: Matus UHLAR - fantomas <uhlar@dont-contact.us>
Date: Tue, 10 Jul 2007 05:26:57 +0200

> > So, replace
> >
> > acl numeric_IPs urlpath_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
> >
> > with
> >
> > acl numeric_IPs dstdom_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
> >
> > and
> >
> > will this work?
> >
> > http_access deny CONNECT numeric_IPs !allowed_IPs

On 06.07.07 11:18, squid3@treenet.co.nz wrote:
> Um, I'm starting to get a little confused here myself after that reply.
>
> When you are wanting to test the actual destination IP you can use the
> 'dst' type ACL (squid will do any DNS lokoup needed to find it before
> testing).

note that using 'dst' acl will disable connecting to those IP's also if
they're specified by a hostname, which is probably not what

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
BSE = Mad Cow Desease ... BSA = Mad Software Producents Desease
Received on Mon Jul 09 2007 - 21:27:06 MDT

This archive was generated by hypermail pre-2.1.9 : Wed Aug 01 2007 - 12:00:03 MDT