On 8/11/2015 12:03 p.m., David Touzeau wrote:
>
>
> Le 07/11/2015 15:07, Amos Jeffries a écrit :
>> On 7/11/2015 11:55 p.m., David Touzeau wrote:
>>> Hi Alex,
>>>
>>> I'm using extra token %>ha{X-Forwarded-For} in helper configuration
>>>
>>> Is it help ?
>>>
>> Where you are using that ACL is also needed.
>>
>> Amos
>
> Using as this:
> external_acl_type ArticaRestrictAccess ttl=360 negative_ttl=360
> children-startup=1 children-idle=1 children-max=5 ipv4 %SRC %SRCEUI48
> %>ha{X-Forwarded-For}
> /usr/share/artica-postfix/external_acl_restrict_access.php
> acl ArticaRestrictAccess external ArticaRestrictAccess
>
> external_acl_type MacToUid ttl=360 negative_ttl=360 children-startup=1
> children-idle=1 children-max=5 ipv4 %SRC %SRCEUI48 %>ha{X-Forwarded-For}
> /usr/share/artica-postfix/external_acl_usersMacs.php --mactouid
> acl MacToUid_acl external MacToUid
>
Sorry I should have been clearer. The critical info there includes all
the access control lines where the ACLs are tested.
The problem is not the token being used, but that the object apparently
tracking transaction state has not been updated early enough with the
state even though it would be available some other way.
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
