Search squid archive

Re: acl [NO] bug (when peers configured)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Henrik Nordstrom disse na ultima mensagem:
> On fre, 2007-08-31 at 19:16 -0300, Michel Santos wrote:
>
>> well, I guess in 2.6 is something wrong at this special point, unless
>> some
>> secret work fixed it (I have not checked > 14S), if you remember this is
>> not working with any 2.6 when coming from a local address, but with 2.5
>> it
>> is
>>
>> shortcut:
>>
>> #on 127.0.0.2
>> acl peer src 127.0.0.1
>>
>> gets 'access denied' for all requests from 127.0.0.1
>>
>> #on 127.0.0.2
>> acl peer src 127.0.0.1/32
>>
>> and 127.0.0.1 goes through ...
>
> Then I guess you must have changed something else as well. 127.0.0.1
> 127.0.0.1/32 and 127.0.0.1/255.255.255.255 is all equivalent and matches
> the exact ip 127.0.0.1, and has always been..
>

hmm, I haven't changed anything else than the squid version

> The magic autodetection of the mask size in earlier releases only kick
> in if the ip ends in .0, but was inconsistent and therefore removed...
>

this is what scares me to death: 'magic' ...

my obs.:
magic starts where maths ends ... ;)

> There has not been any changes in this part of the code since 31 July
> 2006 when the mask size detection was removed..
>

well, I was trying .. asking, begging 'endless' (=>_almost) for six month
with logs until i did finally that scary magic touch of /32 and bingo ..
everything works


michel
...




****************************************************
Datacenter Matik http://datacenter.matik.com.br
E-Mail e Data Hosting Service para Profissionais.
****************************************************


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux