Search squid archive

RE: [squid-users] dstdomain acl is not working for IP addresses- squid-STABLE10

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> -----Original Message-----
> From: cgfreita@xxxxxxxxxxxxx [mailto:cgfreita@xxxxxxxxxxxxx]
> Sent: Tuesday, May 31, 2005 9:41 AM
> To: squid-users@xxxxxxxxxxxxxxx
> Subject: [squid-users] dstdomain acl is not working for IP addresses-
> squid-STABLE10
> 
> 
> Hello,
> 
>      squid-STABLE10 ( compiled from the official source )
>      Linux - Slackware
> 
>      I am having troubles with dstdomain acl.
>      I have already looked at my confs and they seen to be correct.
>      Could someone, please, help me to find what is the problem?
> 
>      My conf, and some example of files used there, are at the bottom.
> 
>      Lets use, arbitrary, for example, the domain: miniclip.com
> 
>      As could be seen in confs, I have this domain in dst_a(acl), but if I
> try to acess www.miniclip.com using 66.165.172.181 ip address it
> loads with no problem.
> 

You might have picked a bad example...  66.165.172.181 does not have any
in-addr.arpa information associated with it.  In other words, a reverse
lookup for 66.165.172.181 does not return a hostname.  No way for squid to
know that they are one and the same.

>      I have tried some regex to get ip addresses in url_regex acl, but I
> got some problems, as, for example, hotmail. When trying to download
> files there, the URL is generated using ip addresses and gets
> blocked. So, I have to get dstdomain working.
> 

Perhaps you should white list a few IP addresses (or ranges) as IP
addresses, and deny the rest by default.

>      I have a lot of more lines in dst_a.txt and porn_a.txt.
> 
>      Please, what did I miss?
>      Thank you for your attention.
> 
> Freitas

---SNIP---

Chris

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux