RE: [squid-users] Non respect fo Proxy chain

2006-02-11 Thread Henrik Nordstrom



On Mon, 6 Feb 2006, Gix, Lilian (CI/OSR) * wrote:


Thanks for your help:

Here is my Configuration regarding direct access:

always_direct deny Firm1_Sites_Internet
always_direct deny Firm2_Sites_Internet
always_direct allow Firm1_Sites_Intranet
always_direct allow Firm2_Sites_Intranet
always_direct allow Intern
always_direct deny all

never_direct allow all


How is your all ACL defined?

(some people redefine all, which is not a good idea...)

Also what is in your two Intranet ACLs above?

Regards
Henrik


Re: [squid-users] Non respect fo Proxy chain

2006-02-11 Thread Henrik Nordstrom



On Mon, 6 Feb 2006, Mark Elsen wrote:


 

Here is my Configuration regarding direct access:

always_direct deny Firm1_Sites_Internet
always_direct deny Firm2_Sites_Internet
always_direct allow Firm1_Sites_Intranet
always_direct allow Firm2_Sites_Intranet
always_direct allow Intern
always_direct deny all

never_direct allow all




  Try removing :

always_direct deny all


Doesn't make any difference in the above configuration as it's implicit by 
the always_direct allow line before it (if Squid reaches the end of an 
access type directive with no verdict then the verdict is the opposite of 
the last)


Regards
Henrik


Re: [squid-users] Non respect fo Proxy chain

2006-02-06 Thread Mark Elsen

 Hello,

 It's not the first time I ask for this, but I didn't see any answer.

 I have two proxies. They have Ips 10.105.x.y and 10.105.x.y+1
 The outgoing is an upstream proxy.

 My problem is: They try to reach by themselves URL with: 192.168.*.*
 instead of forward them to the Upstream proxy.


 1139206331.003 179161 10.104.x.* TCP_MISS/504 1490 GET
 http://192.168.37.10/icons/parent.gif - NONE/- text/html
 1139206331.003 179123 10.104.x.* TCP_MISS/504 1492 GET
 http://192.168.37.10/icons/archive.gif - NONE/- text/html
 1139206331.003 179119 10.104.x.* TCP_MISS/504 1486 GET
 http://192.168.37.10/icons/text.gif - NONE/- text/html
 1139206331.003 179119 10.104.x.* TCP_MISS/504 1492 GET
 http://192.168.37.10/icons/unknown.gif - NONE/- text/html



  http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.8

 M.


RE: [squid-users] Non respect fo Proxy chain

2006-02-06 Thread Gix, Lilian \(CI/OSR\) *
Thanks for your help:

Here is my Configuration regarding direct access:

always_direct deny Firm1_Sites_Internet
always_direct deny Firm2_Sites_Internet
always_direct allow Firm1_Sites_Intranet
always_direct allow Firm2_Sites_Intranet
always_direct allow Intern
always_direct deny all

never_direct allow all

Gix Lilian

-Original Message-
From: Mark Elsen [mailto:[EMAIL PROTECTED] 
Sent: Montag, 6. Februar 2006 10:07
To: Gix, Lilian (CI/OSR) *
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Non respect fo Proxy chain


 Hello,

 It's not the first time I ask for this, but I didn't see any answer.

 I have two proxies. They have Ips 10.105.x.y and 10.105.x.y+1
 The outgoing is an upstream proxy.

 My problem is: They try to reach by themselves URL with: 192.168.*.*
 instead of forward them to the Upstream proxy.


 1139206331.003 179161 10.104.x.* TCP_MISS/504 1490 GET
 http://192.168.37.10/icons/parent.gif - NONE/- text/html
 1139206331.003 179123 10.104.x.* TCP_MISS/504 1492 GET
 http://192.168.37.10/icons/archive.gif - NONE/- text/html
 1139206331.003 179119 10.104.x.* TCP_MISS/504 1486 GET
 http://192.168.37.10/icons/text.gif - NONE/- text/html
 1139206331.003 179119 10.104.x.* TCP_MISS/504 1492 GET
 http://192.168.37.10/icons/unknown.gif - NONE/- text/html



  http://www.squid-cache.org/Doc/FAQ/FAQ-4.html#ss4.8

 M.



Re: [squid-users] Non respect fo Proxy chain

2006-02-06 Thread Mark Elsen
  
 Here is my Configuration regarding direct access:

 always_direct deny Firm1_Sites_Internet
 always_direct deny Firm2_Sites_Internet
 always_direct allow Firm1_Sites_Intranet
 always_direct allow Firm2_Sites_Intranet
 always_direct allow Intern
 always_direct deny all

 never_direct allow all



   Try removing :

 always_direct deny all

 M.