RE: [squid-users] Non respect fo Proxy chain
On Mon, 6 Feb 2006, Gix, Lilian (CI/OSR) * wrote: Thanks for your help: Here is my Configuration regarding direct access: always_direct deny Firm1_Sites_Internet always_direct deny Firm2_Sites_Internet always_direct allow Firm1_Sites_Intranet always_direct allow Firm2_Sites_Intranet always_direct allow Intern always_direct deny all never_direct allow all How is your all ACL defined? (some people redefine all, which is not a good idea...) Also what is in your two Intranet ACLs above? Regards Henrik
Re: [squid-users] Non respect fo Proxy chain
On Mon, 6 Feb 2006, Mark Elsen wrote: Here is my Configuration regarding direct access: always_direct deny Firm1_Sites_Internet always_direct deny Firm2_Sites_Internet always_direct allow Firm1_Sites_Intranet always_direct allow Firm2_Sites_Intranet always_direct allow Intern always_direct deny all never_direct allow all Try removing : always_direct deny all Doesn't make any difference in the above configuration as it's implicit by the always_direct allow line before it (if Squid reaches the end of an access type directive with no verdict then the verdict is the opposite of the last) Regards Henrik
Re: [squid-users] Non respect fo Proxy chain
Hello, It's not the first time I ask for this, but I didn't see any answer. I have two proxies. They have Ips 10.105.x.y and 10.105.x.y+1 The outgoing is an upstream proxy. My problem is: They try to reach by themselves URL with: 192.168.*.* instead of forward them to the Upstream proxy. 1139206331.003 179161 10.104.x.* TCP_MISS/504 1490 GET http://192.168.37.10/icons/parent.gif - NONE/- text/html 1139206331.003 179123 10.104.x.* TCP_MISS/504 1492 GET http://192.168.37.10/icons/archive.gif - NONE/- text/html 1139206331.003 179119 10.104.x.* TCP_MISS/504 1486 GET http://192.168.37.10/icons/text.gif - NONE/- text/html 1139206331.003 179119 10.104.x.* TCP_MISS/504 1492 GET http://192.168.37.10/icons/unknown.gif - NONE/- text/html http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.8 M.
RE: [squid-users] Non respect fo Proxy chain
Thanks for your help: Here is my Configuration regarding direct access: always_direct deny Firm1_Sites_Internet always_direct deny Firm2_Sites_Internet always_direct allow Firm1_Sites_Intranet always_direct allow Firm2_Sites_Intranet always_direct allow Intern always_direct deny all never_direct allow all Gix Lilian -Original Message- From: Mark Elsen [mailto:[EMAIL PROTECTED] Sent: Montag, 6. Februar 2006 10:07 To: Gix, Lilian (CI/OSR) * Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Non respect fo Proxy chain Hello, It's not the first time I ask for this, but I didn't see any answer. I have two proxies. They have Ips 10.105.x.y and 10.105.x.y+1 The outgoing is an upstream proxy. My problem is: They try to reach by themselves URL with: 192.168.*.* instead of forward them to the Upstream proxy. 1139206331.003 179161 10.104.x.* TCP_MISS/504 1490 GET http://192.168.37.10/icons/parent.gif - NONE/- text/html 1139206331.003 179123 10.104.x.* TCP_MISS/504 1492 GET http://192.168.37.10/icons/archive.gif - NONE/- text/html 1139206331.003 179119 10.104.x.* TCP_MISS/504 1486 GET http://192.168.37.10/icons/text.gif - NONE/- text/html 1139206331.003 179119 10.104.x.* TCP_MISS/504 1492 GET http://192.168.37.10/icons/unknown.gif - NONE/- text/html http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.8 M.
Re: [squid-users] Non respect fo Proxy chain
Here is my Configuration regarding direct access: always_direct deny Firm1_Sites_Internet always_direct deny Firm2_Sites_Internet always_direct allow Firm1_Sites_Intranet always_direct allow Firm2_Sites_Intranet always_direct allow Intern always_direct deny all never_direct allow all Try removing : always_direct deny all M.