Re: [squid-users] How squid does Src/Dst IP address matching

2008-03-25 Thread Amos Jeffries
Adrian Chadd wrote: On Mon, Mar 24, 2008, Saurabh Agarwal wrote: I understand the security concern, but if squid is accessed by Users only within the company and company's intranet is secure enough, then it is an overkill as DNS is performed twice(Squid being used in transparent mode), once by

RE: [squid-users] How squid does Src/Dst IP address matching

2008-03-24 Thread Saurabh Agarwal
Saurabh -Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] Sent: Monday, March 24, 2008 10:28 AM To: Saurabh Agarwal Cc: squid-users@squid-cache.org Subject: Re: [squid-users] How squid does Src/Dst IP address matching Saurabh Agarwal wrote: Thanks Amos, I have one follow up

Re: [squid-users] How squid does Src/Dst IP address matching

2008-03-24 Thread Adrian Chadd
On Mon, Mar 24, 2008, Saurabh Agarwal wrote: I understand the security concern, but if squid is accessed by Users only within the company and company's intranet is secure enough, then it is an overkill as DNS is performed twice(Squid being used in transparent mode), once by the browser and

RE: [squid-users] How squid does Src/Dst IP address matching

2008-03-23 Thread Saurabh Agarwal
[mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 4:01 PM To: Saurabh Agarwal Cc: squid-users@squid-cache.org Subject: Re: [squid-users] How squid does Src/Dst IP address matching Saurabh Agarwal wrote: Hi Can someone please tell how does squid does the acl evaluation related to Src/Dst IP

Re: [squid-users] How squid does Src/Dst IP address matching

2008-03-23 Thread Amos Jeffries
Saurabh -Original Message- From: Amos Jeffries [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 4:01 PM To: Saurabh Agarwal Cc: squid-users@squid-cache.org Subject: Re: [squid-users] How squid does Src/Dst IP address matching Saurabh Agarwal wrote: Hi Can someone please tell how

[squid-users] How squid does Src/Dst IP address matching

2008-03-17 Thread Saurabh Agarwal
Hi Can someone please tell how does squid does the acl evaluation related to Src/Dst IP address? Like acl myNet dst 10.0.0.0/255.255.0.0 As I understand squid does not get to know the IP layer information which has the destination IP address field. But in the HTTP header we have the name of

Re: [squid-users] How squid does Src/Dst IP address matching

2008-03-17 Thread Amos Jeffries
Saurabh Agarwal wrote: Hi Can someone please tell how does squid does the acl evaluation related to Src/Dst IP address? Like acl myNet dst 10.0.0.0/255.255.0.0 As I understand squid does not get to know the IP layer information which has the destination IP address field. But in the HTTP