Re: [squid-users] always_direct directive... Some help, please!

From: Henrik Nordstrom <[email protected]>
Date: 20 May 2003 11:40:24 +0200

tis 2003-05-20 klockan 11.01 skrev Boniforti Flavio:
> Hy everybody!
>
> I just need to know if this one is correct and should be doing what I
> want it to:
>
> acl local-servers dst 10.167.211.142
> acl rupar dstdomain intranet.ruparpiemonte.it
> always_direct allow rupar local-servers
> never_direct allow all
>
> I am using a parent-cache, to which I forward all requests... I would
> like that accesso to "local-servers" and "rupar" don't pass through my
> proxy, but they have to go DIRECTLY to the destination server.
> Is this setup OK?

Based on your description I think it should be

always_direct allow rupar
always_direct allow local-servers
never_direct allow all

If you list multiple acls on acl driven directive in Squid
(http_access/always_direct/never_direct/tcp_outgoing_address/...) then
all the listed acls on that line must match the current request for the
directive to match.

always_direct allow rupar local-servers

says that Squid should go direct if the destination domain is
intranet.ruparpiemonte.it AND the destination IP address is
10.167.211.142.

always_direct allow rupar
always_direct allow local-servers

says that Squid should go direct if the destination domain is
intranet.ruparpiemonte.it OR the destination IP address is
10.167.211.142.

Regards
Henrik

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
Please consult the Squid FAQ and other available documentation before
asking Squid questions, and use the squid-users mailing-list when no
answer can be found. Private support questions is only answered
for a fee or as part of a commercial Squid support contract.
If you need commercial Squid support or cost effective Squid and
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, [email protected]
Received on Tue May 20 2003 - 03:40:39 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:16:47 MST