Re: [SQU] Retricting IP's to specific WEB sites

Zackerov wrote:

> I tryed to put this IP in the acl line like so:
> acl NAME-SITE dstdomain www.site.com 194.123.123.123
>
> But it doesn't work at all, also strange thing, if i try to make a
> host lookup of:
> 194.123.123.123 the responce is "unknow"
> but if i try to resolve www.site.come the responce is 194.123.123.123

dstdomain maches the domainname of the request, not IP addresses. If a
request is received using IP then Squid will try to resolve the IP
address to find it's real name, and if not possible "UNKNOWN" will be
used.

Your best choice of ACL here is probably the dst ACL. It matches the IP
address of the requested resource, not the domain name.

--
Henrik Nordstrom
Squid hacker
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html