[squid-users] Can I force certain destinations to ipv4?

[ngtech1ltd at gmail.com]

Hey,

>From my tests you can use some reject rules on IPV6 in iptables/nftables and this will force squid by itself it use ipv4.
This is a much better approach to my opinion rather then not responding to aaaa queries.

Let me know if you need some help with this.
Eliezer

-----Original Message-----
From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Jonathan Lee
Sent: Thursday, November 21, 2024 5:19 PM
To: Ralf Hildebrandt <Ralf.Hildebrandt at charite.de>
Cc: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Can I force certain destinations to ipv4?

I did this with the local dns. Unbound for example you can set specific items to resolve only ipv4, if Squid points to a dns that provides the resolves for it, it can be controlled on that side, again requires NAT a firewall with ACLs etc 
Sent from my iPhone

> On Nov 21, 2024, at 05:52, Ralf Hildebrandt <Ralf.Hildebrandt at charite.de> wrote:
> 
> Hi!
> 
> Can I force certain destinations to be reached using ipv4 only?
> 
> I found this:
> https://superuser.com/questions/994728/force-squid-to-connect-to-sites-over-ipv4-rather-than-ipv6
> 
> and implemented:
> 
> acl apiendpoint dstdomain api.endpoint.example
> tcp_outgoing_address 193.175.73.216 apiendpoint
> 
> 193.175.73.216 being the IP of my squid's extern a interface.
> But alas, It doesn't work. Sometimes an ipv4, sometimes an ipv6
> address is being used...
> 
> Using:
> ======
> 
> # squid --version
> Squid Cache: Version 6.12-VCS
> 
> more precisely:
> squid-6.12-20241031-r3b53538eae
> 
> --
> Ralf Hildebrandt
> Charité - Universitätsmedizin Berlin
> Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
> Invalidenstraße 120/121 | D-10115 Berlin
> 
> Tel. +49 30 450 570 155
> ralf.hildebrandt at charite.de
> https://www.charite.de
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> https://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
https://lists.squid-cache.org/listinfo/squid-users