Re: [squid-users] acl [NO] bug (when peers configured)

From: Michel Santos <michel@dont-contact.us>
Date: Fri, 31 Aug 2007 19:16:30 -0300 (BRT)

Henrik Nordstrom disse na ultima mensagem:
> On fre, 2007-08-31 at 09:24 -0300, Michel Santos wrote:
>
>> > 192.168.1.0/24 is the same as 192.168.1.0-192.168.1.255
>> >
>>
>> really ;)
>>
>> a range indicator is allowed?
>
> Yes.

I was asking about the dash '-'

>
> The full specification is
>
> IPA-IPB/MASK
>

well, no need teaching a dog to bark ;)

> where IPB defaults to IPA if not specified, and /MASK defaults to /32 if
> not specified (at least unless you use a old now obsolete Squid version
> where it guesses the mask size based on the format of the IP...)

well, I guess in 2.6 is something wrong at this special point, unless some
secret work fixed it (I have not checked > 14S), if you remember this is
not working with any 2.6 when coming from a local address, but with 2.5 it
is

shortcut:

#on 127.0.0.2
acl peer src 127.0.0.1

gets 'access denied' for all requests from 127.0.0.1

#on 127.0.0.2
acl peer src 127.0.0.1/32

and 127.0.0.1 goes through ...

michel

...

****************************************************
Datacenter Matik http://datacenter.matik.com.br
E-Mail e Data Hosting Service para Profissionais.
****************************************************
Received on Fri Aug 31 2007 - 16:16:38 MDT

This archive was generated by hypermail pre-2.1.9 : Sat Sep 01 2007 - 12:00:04 MDT