[squid-users] no src IP in access log for locally generated requests

Alex Rousskov rousskov at measurement-factory.com
Mon Jan 11 15:11:46 UTC 2021


On 1/11/21 9:16 AM, Eliezer Croitoru wrote:
> I have in my logs:

> 1610372657.529      0 - TCP_DENIED/403 3638 GET
> http://crl.kaspersky.com/aia/KSNGlobalRootCAECC.crt - HIER_NONE/-
> text/html –

> And it means probably that squid is generating these requests.

> What ACL can I use to allow this?

To match internal requests, consider using the "internal" initiator with
the transaction_initiator ACL.

Alex.


More information about the squid-users mailing list