[squid-users] Problem with neighbor_type_domain

From: Adrian Senn <adrian@dont-contact.us>
Date: Thu, 25 Mar 2004 23:00:50 +0100

Hello together

I'm using squid in a chain with proxies.

Momentarly is the internal proxy a tasksmart appliance which i would
replace with a squid proxy.
We are using this chain because the middle server is a virus scanner.

For the moment this is our solution:

client -----> tasksmart -----> virusscanner -----> external
                                 (viruswall) proxy (squid)

now i would change the configuration with a special need.

client -----> internal -----> virusscanner -----> external
               proxy (squid) (viruswall) proxy (squid)
                   \ /
                    \bypass the virusscanner /
                     for some domains

10.10.x.0 10.10.10.30 10.10.10.7 10.10.10.29

This bypass is for domains which i don't need to scan the content
about viruses. Or for some applications which do have a problem with
the virus scanner (streaming)

I think the neighbor_type_domain should be the solution but it doesn't work.

And i didn't find my mistake.

I made following entries in the squid.conf File.
The IP addresses arent the original one as used in the office.

cache_peer 10.10.10.7 parent 8080 0 no-query
cache_peer 10.10.10.29 parent 8080 3130

neighbor_type_domain 10.10.10.29 sibling .foo.ch .ch

#hierarchy_stoplist cgi-bin ?

acl local-intranet dst 10.10.0.0/16
acl local-external dst 10.10.10.0/24
always_direct deny local-intranet
always_direct allow local-external
never_direct allow all

prefer_direct off

The host 10.10.10.7 didn't know icp. I tried a lot of configuration
examples but none worked. The internal squid uses always the server
10.10.10.7. And i didn't want open the internal proxy for direct requests.

Is there a solution for this?

-- 
Gruss Adrian Senn
-- 
|p mbox: adrian@senn.ch                                     _ |
|g mbox: adrian.senn@usz.ch          ASCII ribbon campaign ( )|
|www:  <http://www.senn.ch/>          - against HTML email  X |
|      <http://www.cevinet.ch/>                   & vCards / \|
Received on Thu Mar 25 2004 - 14:57:28 MST

This archive was generated by hypermail pre-2.1.9 : Thu Apr 01 2004 - 12:00:03 MST