Re: [squid-users] Rejecting URLs with unresolvable DNS hosts?

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Tue, 16 Dec 2003 17:25:05 +0100 (CET)

Right.. should check things before answering..

If Suqid can not resolve an IP address is uses the address 255.255.255.255
in access controls, so to deny unresolved addresses you can

  acl nowhere dst 255.255.255.255
  http_access deny nowhere

(this time the answer is verified)

On Tue, 16 Dec 2003, Paas, Sven wrote:

> Hi,
>
> hmm, that does not work for me. With
>
> acl everywhere dst 0.0.0.0/0
> http_access deny !everywhere
> http_access allow ournet_src all_dst
> http_access deny all
>
> my cache still throws all_dst to ANY_PARENT, when it
> sees an unresolvable hostname.
>
> Sven
>
Received on Tue Dec 16 2003 - 09:25:09 MST

This archive was generated by hypermail pre-2.1.9 : Thu Jan 01 2004 - 12:00:14 MST