Re: when 'cache_peer_access <cache> deny all_dst' is not enough

Clifton Royston wrote:

> I believe the reverse is true with name-based src addresses, though I
> haven't heard this confirmed by one of the gurus.

Yes.

cache_peer_access does not wait for lookups to complete. It will only
use data already known in Squids internal DNS caches. It will however
trigger an lookup to populate the internal cache so Squid eventually
learns to handle future requests properly.

--
Henrik Nordstrom
Squid hacker