<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#464646" bgcolor="#FFFFFF">
Hi comunity, Squid fans<br>
<font face="Arial"><br>
I would like to use an external acl process for Geoip processing<br>
<br>
i have tried to setup squid to send the remote peer address using
%<a code but it always reply with a "-"<br>
<br>
external_acl_type MyGeopip ttl=3600 negative_ttl=3600
children-startup=2 children-idle=2 children-max=20 concurrency=1
ipv4 %un %SRC %SRCEUI48 %>ha{X-Forwarded-For} %DST
%ssl::>sni %USER_CERT_CN %note %<a /lib/squid3/squid-geoip<br>
<br>
acl </font><font face="Arial"><font face="Arial">MyGeopip</font>_acl
external </font><font face="Arial">MyGeopip </font><font
face="Arial"><br>
</font><font face="Arial"><font face="Arial">http_access deny !</font></font><font
face="Arial"><font face="Arial"><font face="Arial"><font
face="Arial">MyGeopip</font>_acl </font><br>
<br>
I was thinking that Squid call the helper before resolving the
remote route.<br>
<br>
So to force it, i have added a "fake" acl to force Squid to
calculate the remote address.<br>
<br>
</font>acl fake_dst dst 127.0.0.2<br>
http_access deny !</font><font face="Arial"><font face="Arial">fake_dst
</font>!</font><font face="Arial"><font face="Arial"><font
face="Arial"><font face="Arial"><font face="Arial">MyGeopip</font>_acl
<br>
<br>
But it failed too, the external_acl still receive the "-"
instead of the remote public IP address of the server<br>
<br>
<br>
Where is the mistake ?<br>
<br>
Regards<br>
</font></font></font><br>
</font>
</body>
</html>