[squid-users] header_access help

2010-02-17 Thread David C. Heitmann

how can i make a acl rule for reply- and request_header_access???
i would only allow User-Agent for gmx and ebay

i have testing:
acl gmx srcdomain gmx.net gmx.de gmx.com

reply_header_access User-Agent allow gmx
request_header_access User-Agent allow gmx

but it doesent work :(

can somebody help me please



Re: [squid-users] header_access help

2010-02-17 Thread Amos Jeffries
On Wed, 17 Feb 2010 15:50:43 +0100, David C. Heitmann
da...@lafourmi.de
wrote:
 how can i make a acl rule for reply- and request_header_access???
 i would only allow User-Agent for gmx and ebay
 
 i have testing:
 acl gmx srcdomain gmx.net gmx.de gmx.com
 
 reply_header_access User-Agent allow gmx
 request_header_access User-Agent allow gmx
 
 but it doesent work :(
 
 can somebody help me please

All header are allowed unless denied.

Allowing something which is happening anyway is pointless work.

Your requirement of only allow User-Agent for gmx and ebay needs to be
inverted.
deny if not for gmx and ebay  making the rule:

  request_header_access User-Agent deny !gmx

Note: There is no _reply_ User-Agent: field.

PS: every other website you see which has a mobile cellular version, or
has IE-specific versions, or has IE-only requirements will now die is
various horrible and visually annoying ways.

Amos


Re: [squid-users] header_access help

2010-02-17 Thread Henrik Nordström
ons 2010-02-17 klockan 15:50 +0100 skrev David C. Heitmann:
 how can i make a acl rule for reply- and request_header_access???
 i would only allow User-Agent for gmx and ebay

User-Agent is a request header, so only request_header_access would be
relevant.

 i have testing:
 acl gmx srcdomain gmx.net gmx.de gmx.com

Hmm.. have a feeling that should be dstdomain and with a leading dot
infront of each...

srcdomain matches the domain/hostname of the requesting client.

dstdomain matches the domain/hostname of the requested URL.

Regards
Henrik