<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><span style="caret-color: rgb(68, 68, 68); color: rgb(68, 68, 68); font-family: SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace; font-size: 12.25px; white-space: pre; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-text-size-adjust: 100%; background-color: rgb(243, 243, 243);">acl to_ipv6 dst ipv6
acl from_ipv6 src ipv6</span><div><font color="#444444" face="SFMono-Regular, Menlo, Monaco, Consolas, Liberation Mono, Courier New, monospace"><span style="caret-color: rgb(68, 68, 68); font-size: 12.25px; white-space: pre; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-text-size-adjust: 100%; background-color: rgb(243, 243, 243);"><br></span></font></div><div><font color="#444444" face="SFMono-Regular, Menlo, Monaco, Consolas, Liberation Mono, Courier New, monospace"><span style="caret-color: rgb(68, 68, 68); font-size: 12.25px; white-space: pre; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-text-size-adjust: 100%; background-color: rgb(243, 243, 243);">I after block them with terminate connections.</span></font></div><div><font color="#444444" face="SFMono-Regular, Menlo, Monaco, Consolas, Liberation Mono, Courier New, monospace"><span style="caret-color: rgb(68, 68, 68); font-size: 12.25px; white-space: pre; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-text-size-adjust: 100%; background-color: rgb(243, 243, 243);"><br></span></font></div><div><font color="#444444" face="SFMono-Regular, Menlo, Monaco, Consolas, Liberation Mono, Courier New, monospace"><span style="caret-color: rgb(68, 68, 68); font-size: 12.25px; white-space: pre; -webkit-tap-highlight-color: rgba(0, 0, 0, 0); -webkit-text-size-adjust: 100%; background-color: rgb(243, 243, 243);">I hope that helps our isp is ipv6 only<br id="lineBreakAtBeginningOfSignature"></span></font><div dir="ltr">Sent from my iPhone</div><div dir="ltr"><br><blockquote type="cite">On Jun 17, 2024, at 08:17, Alex Rousskov <rousskov@measurement-factory.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>On 2024-06-16 19:46, Jonathan Lee wrote:</span><br><blockquote type="cite"><span>I use them for ipv6 blocks they seem to work that way in 5.8</span><br></blockquote><span></span><br><span>Just to double check that we are on the same page here, please share an example (or two) of your src_as or dst_as ACL definitions (i.e., "acl ... dst_as ..." or similar lines). I do _not_ need the corresponding directives that use those AS-based ACLs (e.g., "http_access deny..."), just the "acl" lines themselves.</span><br><span></span><br><span>As an added bonus, I may be able to confirm whether Squid v5.8 can grok responses about Autonomous System Numbers used by your specific configuration :-).</span><br><span></span><br><span></span><br><span>Thank you,</span><br><span></span><br><span>Alex.</span><br><span></span><br><span></span><br><blockquote type="cite"><blockquote type="cite"><span>On Jun 16, 2024, at 17:00, Alex Rousskov <rousskov@measurement-factory.com> wrote:</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Hello,</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span> Does anybody still have src_as and dst_as ACLs configured in their production Squids? There are several serious problems with those ACLs, and those problems have been present in Squid for many years. I hope that virtually nobody uses those ACLs today.</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>If you do use them, please respond (publicly or privately) and, if possible, please indicate whether you have verified that those ACLs are working correctly in your deployment environment.</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Thank you,</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Alex.</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> acl aclname src_as number ...</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> acl aclname dst_as number ...</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # [fast]</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # Except for access control, AS numbers can be used for</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # routing of requests to specific caches. Here's an</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # example for routing all requests for AS#1241 and only</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # those to mycache.mydomain.net:</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # acl asexample dst_as 1241</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # cache_peer_access mycache.mydomain.net allow asexample</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><span> # cache_peer_access mycache_mydomain.net deny all</span><br></blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>_______________________________________________</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>squid-users mailing list</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>squid-users@lists.squid-cache.org</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>https://lists.squid-cache.org/listinfo/squid-users</span><br></blockquote></blockquote><span></span><br></div></blockquote></div></body></html>