[squid-users] squid 5 and parent peers

[Markus Moeller]

Hi,

  I try to setup a proxy chain, but don't get the setup right. I have one 
squid with 2 parents. One with auth for domainA.com and one w/o auth for the 
non local IPs (i.e. Internet).

  With the below config I see domainA.com still going to the unauthenticated 
parent proxy. Any hint why ?

Thank you
Markus


#
# Recommended minimum configuration:
#

# Example rule allowing access from your local networks.
# Adapt to list your (internal) IP networks from where browsing
# should be allowed
acl localnet src 0.0.0.1-0.255.255.255  # RFC 1122 "this" network (LAN)
acl localnet src 10.0.0.0/8             # RFC 1918 local private network 
(LAN)
acl localnet src 100.64.0.0/10          # RFC 6598 shared address space 
(CGN)
acl localnet src 169.254.0.0/16         # RFC 3927 link-local (directly 
plugged) machines
acl localnet src 172.16.0.0/12          # RFC 1918 local private network 
(LAN)
acl localnet src 192.168.0.0/16         # RFC 1918 local private network 
(LAN)
acl localnet src fc00::/7               # RFC 4193 local private network 
range
acl localnet src fe80::/10              # RFC 4291 link-local (directly 
plugged) machines

acl localdst dst 10.0.0.0/8             # RFC 1918 local private network 
(LAN)
acl localdst dst 100.64.0.0/10          # RFC 6598 shared address space 
(CGN)
acl localdst dst 169.254.0.0/16         # RFC 3927 link-local (directly 
plugged) machines
acl localdst dst 172.16.0.0/12          # RFC 1918 local private network 
(LAN)
acl localdst dst 192.168.0.0/16         # RFC 1918 local private network 
(LAN)
acl localdst dst fc00::/7               # RFC 4193 local private network 
range
acl localdst dst fe80::/10              # RFC 4291 link-local (directly 
plugged) machines

acl listA dstdomain -n  domainA.com

acl SSL_ports port 443
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443         # https
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http

cache_peer auth-proxy parent   3128 0  no-query default login=NEGOTIATE
cache_peer parent-proxy parent   3128 0  no-query default
cache_peer_access auth-proxy allow listA
cache_peer_access parent-proxy allow !localdst
never_direct deny localdst
never_direct allow all

debug_options 44,10 11,20