[squid-users] ACL dstdomain not working

2008-03-11 Thread Luca Gervasi
Hello,
i'm pretty new to squid. I installed it for the first time in a lab
which needs to access to some specific domains through a parent proxy,
using direct connection for all the requests.

I setup Squid Cache: Version 2.6.STABLE16, on Fedora 8, adding those commands:

cache_peer MY_PARENT_PROXY parent 3128 0 no-query proxy-only default

acl ieee dstdomain .ieee.org
acl acmorg dstdomain .acm.org

cache_peer_access MY_PARENT_PROXY allow ieee acmorg
cache_peer_access MY_PARENT_PROXY deny all

But all the requests seems to go on directly, avoiding MY_PARENT_PROXY.

Please note that i can setup squid to use ALWAYS MY_PARENT_PROXY, so
the error isn't in the connection with the parent...AFAICS..

Thanks a lot!

Luca Gervasi
-- 
GnuPG / PGP Key Available on http://pgp.mit.edu
KeyID: 0x17E179AA - Key Fingerprint:
6594 0AEB 13E9 7CA5 EBF7 FCF7 E201 1E6F 17E1 79AA
Linux Registered User: #192634
Web: http://www.ashetic.net/wordpress/


Re: [squid-users] ACL dstdomain not working

2008-03-11 Thread Luca Gervasi
Thanks for your kind answer. I tried to apply what you said in your
previous message as follow:

cache_peer MY_PARENT_PROXY parent 3128 0 no-query proxy-only default

acl to_parent dstdomain .ieee.org .acm.org

cache_peer_access MY_PARENT_PROXY allow to_parent.

What i got is:

MY_IP TCP_MISS/200 [...] DIRECT/140

...parent proxy got untouched at all :(

Anyone?

Thanks in Advance.

Luca



On Tue, Mar 11, 2008 at 10:41 AM, Henrik K <[EMAIL PROTECTED]> wrote:
> On Tue, Mar 11, 2008 at 10:32:49AM +0100, Luca Gervasi wrote:
>  > Hello,
>  > i'm pretty new to squid. I installed it for the first time in a lab
>  > which needs to access to some specific domains through a parent proxy,
>  > using direct connection for all the requests.
>  >
>  > I setup Squid Cache: Version 2.6.STABLE16, on Fedora 8, adding those 
> commands:
>  >
>  > cache_peer MY_PARENT_PROXY parent 3128 0 no-query proxy-only default
>  >
>  > acl ieee dstdomain .ieee.org
>  > acl acmorg dstdomain .acm.org
>  >
>  > cache_peer_access MY_PARENT_PROXY allow ieee acmorg
>  > cache_peer_access MY_PARENT_PROXY deny all
>
>  
> http://wiki.squid-cache.org/SquidFaq/SquidAcl#head-af2c190759b099a7986221cd12a4066eb146a1c4
>
>  Thus:
>
>
>  cache_peer_access MY_PARENT_PROXY allow ieee
>  cache_peer_access MY_PARENT_PROXY allow acmorg
>
> cache_peer_access MY_PARENT_PROXY deny all
>
>  Or more simply:
>
>  acl to_parent dstdomain .ieee.org .acm.org
>  cache_peer_access MY_PARENT_PROXY allow to_parent
>
>
> cache_peer_access MY_PARENT_PROXY deny all
>
>



-- 
GnuPG / PGP Key Available on http://pgp.mit.edu
KeyID: 0x17E179AA - Key Fingerprint:
6594 0AEB 13E9 7CA5 EBF7 FCF7 E201 1E6F 17E1 79AA
Linux Registered User: #192634
Web: http://www.ashetic.net/wordpress/