[squid-users] http request header must use hostname

Walter H. Walter.H at mathemainzel.info
Sun Dec 6 18:38:30 UTC 2015


On 06.12.2015 11:07, Yuri Voinov wrote:
> # Numeric IP's acl
> acl numeric_IPs dstdom_regex [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
>
> # Deny access to numeric IP's
> http_access deny CONNECT numeric_IPs
> deny_info TCP_RESET numeric_IPs
>
and not to forget IPv6 ...

acl numeric_IPs_ipv4 dstdom_regex [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+

acl numeric_IPs_ipv6 dstdom_regex ([0-9A-Fa-f]+|\:)+[0-9A-Fa-f]+

http_access deny CONNECT numeric_IPs_ipv4
deny_info TCP_RESET numeric_IPs_ipv4

http_access deny CONNECT numeric_IPs_ipv6
deny_info TCP_RESET numeric_IPs_ipv6

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4312 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20151206/42d7f1ff/attachment.bin>


More information about the squid-users mailing list