Search squid archive

Are dns_v4_first and "acl to_ipv6 dst ipv6" mutually exclusive?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello!

Squid 3.1.19.

Our squid servers are dual stack IPv4/IPv6 since about a year,
with this config "hack":

tcp_outgoing_address x:x:x:x::x to_ipv6
tcp_outgoing_address x.x.x.x !to_ipv6
acl to_ipv6 dst ipv6
http_access allow to_ipv6 !all

But now our users are tired of webs that announce IPv6 addresses
but don't answer on port 80 on these addresses. So I enabled
dns_v4_first in the config and did squid -k reconfigure.
But it didn't help, we still get IPv6 timeouts towards
misconfigured web sites.

I'm guessing that dns_v4_first and the ipv6 config above are
mutually exclusive? Should I change the tcp_outgoing_address
line to just this:
tcp_outgoing_address x:x:x:x::x
tcp_outgoing_address x.x.x.x
and remove these lines:
acl to_ipv6 dst ipv6
http_access allow to_ipv6 !all

Or will this remove all of our IPv6 connectivity through squid?

Thanks!

-- 
Peter Olsson                    pol@xxxxxxxxxxx


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux