[squid-users] i need to match 2 access list into 1 access list action

Amos Jeffries squid3 at treenet.co.nz
Sun Aug 6 12:38:49 UTC 2017


On 06/08/17 22:17, --Ahmad-- wrote:
> he folks
> =======
> 
> i have acl as  :
> 
> acl ip1 myip 12.58.120.72
> tcp_outgoing_address 1.1.1.1 ip1
> 
> 
> but ACL above will match all src ip addresses .

No. It will only match traffic where the "myip" value is 12.58.120.72. 
It has nothing to do with the TCP src-IP.


> the game i want is i just need to allow the from  src specific ip address to match the acl above .
> 
> 
> so what i want to do is :
> 
> acl hhh src 12.58.70.10/32
> 
> and  tcp_outgoing_address 1.1.1.1 ( if the src was  12.58.70.10 matching the ip  12.58.120.72 )
> 

Do you mean to detect traffic from the 12.58.70.10/32 going to dst-IP 
12.58.120.72 ?

Or do you mean to detect traffic from the 12.58.70.10/32 going to 
squid-IP 12.58.120.72 ?


Amos


More information about the squid-users mailing list