[squid-users] Whitelist ONLY exception isn't working correctly

Amos Jeffries squid3 at treenet.co.nz
Sun May 13 07:57:18 UTC 2018


On 13/05/18 14:17, Alex Rousskov wrote:
> On 05/12/2018 07:55 PM, Martin Hanson wrote:
>> # !!! THIS ISN'T WORKING !!! ubuntu.com, mojang.com still gets blocked on these boxes.
>> http_access deny windows_boxes !whitelist
> ...
>> http_access deny all
> 
> You have no rules that allow windows_boxes to access whitelist servers,
> and you have a "deny all" default. Consider this alternative:

I don't think that is the problem. There is "allow localnet" which
includes those windows_boxes.

It is probably !whitelist matching true for the initial CONNECT before
ssl::server_name is available.

Amos


More information about the squid-users mailing list