[squid-users] Re: [patch] Re: [squid-users] X-Forwarded-For and cache_peer_access -- Fixed!

From: babajaga <augustus_meyer_at_yahoo.de>
Date: Fri, 9 Aug 2013 15:58:21 -0700 (PDT)

Back to original squid.conf:

Instead of
follow_x_forwarded_for allow localhost
acl forwardTrafficSubnet1 src 172.21.120.0/24
cache_peer 172.21.120.24 parent 8881 0 proxy-only no-query
cache_peer_access 172.21.120.24 deny forwardTrafficSubnet1
never_direct deny forwardTrafficSubnet1
cache_peer_access 172.21.120.24 allow all
never_direct allow all

I would use

follow_x_forwarded_for allow localhost
acl forwardTrafficSubnet1 src 172.21.120.0/24
cache_peer 172.21.120.24 parent 8881 0 proxy-only no-query
cache_peer_access 172.21.120.24 deny forwardTrafficSubnet1
always_direct allow forwardTrafficSubnet1
#never_direct deny forwardTrafficSubnet1 Looks like double negation: NOT
Never-DIRECT
cache_peer_access 172.21.120.24 allow all
never_direct allow all

--
View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/X-Forwarded-For-and-cache-peer-access-tp4661082p4661506.html
Sent from the Squid - Users mailing list archive at Nabble.com.
Received on Fri Aug 09 2013 - 22:59:03 MDT

This archive was generated by hypermail 2.2.0 : Sat Aug 10 2013 - 12:00:08 MDT