Re: [squid-users] Rejecting URLs with unresolvable DNS hosts?

Hi,

Henrik, that works fine, many thanks.

I found that when using

        never_direct all

, one might also use

        always_direct allow nowhere

instead of

          http_access deny nowhere

In that setup, you even get the right error message

"Name Error: The domain name does not exist."

instead of

"Access Denied."

from the cache :-)

Fine. That's exactely what I wanted.

Regards, Sven

-----Ursprüngliche Nachricht-----
Von: Henrik Nordstrom [mailto:hno@squid-cache.org]
Gesendet: Dienstag, 16. Dezember 2003 17:25
An: Paas, Sven
Cc: 'Henrik Nordstrom'; 'squid-users@squid-cache.org'
Betreff: Re: [squid-users] Rejecting URLs with unresolvable DNS hosts?

Right.. should check things before answering..

If Suqid can not resolve an IP address is uses the address 255.255.255.255
in access controls, so to deny unresolved addresses you can

  acl nowhere dst 255.255.255.255
  http_access deny nowhere

(this time the answer is verified)
Received on Tue Dec 16 2003 - 09:40:13 MST