Re: [squid-users] Please help need to close open proxy

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 05 Nov 2001 20:00:03 +0100

Mark Wagner wrote:
>
> My Company is using squid to help accellerate and secure our website,
> our website runs on windows but the squids are linux.
>
> Here is the situation:
>
> webserver (private ip space)
> |
> |_____________________
> | |
> | |
> Squid box Squid Box (both public IPs)
>
> DNS is setup to round robin to the ip addresses of the 2 squid boxes.
>
> How can I setup an access list that will allow only requests for our
> web site to be retrived by squid??

acl myserver dst your.private.ip
acl port80 port 80
http_access allow myserver port 80
http_access deny all

> I think part of the problem I'm running into is what do I say is an
> allowable request??? cuase they are not gonna request the private IP
> space.

The IP Squid thinks the request is for.

Regards
Henrik Nordström
Squid hacker
Received on Mon Nov 05 2001 - 12:01:17 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:03:54 MST