[squid-users] allowing headers per ip and block headers on others

Amos Jeffries squid3 at treenet.co.nz
Sat Jul 13 11:37:44 UTC 2019


On 13/07/19 9:55 pm, --Ahmad-- wrote:
> 
> 
> i want it when squid access / contact with 1.2.3.4
> 
> 

Use "dst" ACL for destination IP's.

However, requests are generated before sending. Squid does not know
which IP will *in future* be used to deliver the request. So this is
unlikely to work properly even if you get the ACL rules correct.



On 13/07/19 9:20 pm, --Ahmad-- wrote:
> hello folks .
>
> say i have a set of rules to block some certain types of headers  as
below :
>
> header_access Pragma deny all
> header_access Keep-Alive deny all
>

"header_access" is an old Squid-2 directive.

"Keep-Alive" is a HTTP/1.0-only Hop-By-Hop header, Squid does *not* use
it in any way, nor send it to servers.
 => The rules you have for "Keep-Alive" do nothing.


"Pragma" is likewise an old HTTP/1.0 header, *but* has some mandatory
handling requirements when seen in HTTP/1.1. Removing it will break HTTP
cache responses.


Amos


More information about the squid-users mailing list