Re: Squid acl access - neighbours & parents..

        A workaround which you could probably implement now would
be packet filtering at your border router(s). It would be fairly simple.
On a cisco, you'd do something like:

access-list 101 permit ip host <friendly neighbor> host <my proxy cache> eq 3130
access-list 101 deny ip any host <my proxy cache> eq 3130
interface <interface>
ip access-group 101 in

        For example:

access-list 101 permit ip host 10.0.3.1 host 10.3.3.1 eq 3130
access-list 101 deny ip any host 10.3.3.1 eq 3130
interface serial 0
ip access-group 101 in

        Most routers nowadays support some sort of port level packet
filtering.

        Note that my opinion is that this should be handled at the
application level rather than at the transport level, so Duane W.
has my encouragement to getting this done :)

        Regards,

        Ed

--
On Thu, 5 Sep 1996, Duane Wessels wrote:
> gordon@drogon.net writes:
> 
> >
> >Hello - I've just moved from Harvest to Squid & so far so good. However,
> >someone close to us netwise wants to neighbour with us which is good I
> >guess, but is there a way I can stop them using us as a parent? It's quite
> >important that I be able to do this to stop them effectively using our
> >network bandwidth instead of theres when they get a cache miss ... (While 
> >at the same time allowing our customers to use us as a parent).
> >
> >Is it possible, or do I just have to trust my neighbours?
> 
> You can't do this with current versions, so you have to trust them.
> 
> But its a good idea--I'll add it to the todo list.
> 
> Duane W.
>