Re: [squid-users] ACL "dst" with no netmask

From: Duane Wessels <wessels@dont-contact.us>
Date: Fri, 2 Jan 2004 14:07:07 -0700 (MST)

On Fri, 2 Jan 2004, Eric Geater 12/12/03 wrote:

> I need to block an IP address. So far I've read that I can't enter it
> into my dstdomain acl because it's not a FQDN. Fine, but the "dst" ACL
> type expects an IP address AND subnet mask, which isn't used for web
> addresses. Anyone who can clarify this for me would be a hero, now that
> we seem to be getting more of those false URLs in carefully constructed
> emails lately.

The netmask is optional. If you just write "... dst 1.2.3.4" it will work
the way you expect.

Duane W.
Received on Fri Jan 02 2004 - 14:07:08 MST

This archive was generated by hypermail pre-2.1.9 : Sun Feb 01 2004 - 12:00:02 MST