[squid-users] squid 4.5, can't download certificate?

Amos Jeffries squid3 at treenet.co.nz
Wed Jan 23 04:53:30 UTC 2019


On 23/01/19 5:40 pm, Dmitry Melekhov wrote:
> 
> Thank you for explanation, it is easier for me to contact rejik
> developer and ask him to pass traffic if client address is "-" as he
> already did for
> 
> fff...fff.  So, I'll inform him that such change is planned and he will
> be ready :-)


Um, to be more prescriptive ...

The (%>a) part *before* the '/' is the actual "client IP address".

If that is '-' (like your logs show it already is) then the reverse-DNS
FQDN part *after* the '/' cannot be relied upon at all so should
generally be ignored.


Whether or not we change the FQDN parts display, it could still have an
IPv6 address when a real IPv6 client arrives - and the IP part before
the '/' would then also still have an IPv6 address too. So IPv6 support
is needed regardless.


Amos


More information about the squid-users mailing list