[squid-users] ACL file not recognizing . for all subdomains

From: John W. Gordon <jgordon@dont-contact.us>
Date: Fri, 28 Mar 2008 12:17:23 -0400

I am having a problem getting ACL to recognize a whole domain and
subdomains using the .domainname.extension syntax.

I have setup SQUID 2.6 Stable 5 on Ubuntu 7.04 and have modified the

/etc/squid/squid.conf file to have the following changes from the
default configuration.

acl all dst 0.0.0.0/0.0.0.0
acl allowed_sites_ip dst "/etc/squid/allowed_sites_ip"
acl allowed_sites_domain dst "/etc/squid/allowed_sites_domain"
http_access allow allowed_sites_ip
http_access allow allowed_sites_domain

In the file allowed_site_domain I have only

fedex.com

the fedex.com site will come up in the browser but none of its images
work because they are located at images.fedex.com

If I have the following in the allowed_sites_domain file it works
perfectly.

fedex.com
images.fedex.com

However, I want all things at fedex.com and don't want to key in all of
their subdomains. According to documentation I should be able to just
put

.fedex.com

When I do I get an error access denied on the page and when restarting
squid I get this error.

2008/03/28 11:38:00| aclParseIpData: Bad host/IP: '.fedex.com'
2008/03/28 11:38:00| aclParseAclLine: WARNING: empty ACL: acl
allowed_sites_domain dst "/etc/squid/allowed_sites_domain"

Any help will be appreciated. I searched and found nothing but
documents saying I was doing it right. I would be happy to have someone
point me in the right direction.

John W. Gordon
Computer Support Specialist
jgordon@timbar.com
Received on Fri Mar 28 2008 - 10:17:38 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Apr 01 2008 - 13:00:05 MDT