squid proxy server

Andy Green fedora at warmcat.com
Mon Aug 30 09:27:40 UTC 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 30 August 2004 10:00, David wrote:
> hi all,
>
> i hav setup squid that controls 3 different classrooms.
> each class has a range of ip addresses.
>
> i hav used the acl as per documentation & help that every1 has given me.
>
> acl machine src 192.168.10.21-192.168.10.41/255.255.255.0
>
> but when i restart squid it generates the following warnings.
>
> aclParseipData; WARNING : Netmask masks away part of the speified IP in
> '192.168.10.21-192.168.10.41/255.255.255.0'

Just a guess... you either give an IP range or an IP with netmask... not both.  
The error looks like it is not correctly understanding what you have given, 
since both IPs are inside that netmask.

Google on -->   squid acl "ip range"

http://www.squid-cache.org/mail-archive/squid-users/200209/0364.html


From: Henrik Nordstrom <hno at dont-contact.us> 
 Date: Mon, 9 Sep 2002 20:37:27 +0200
 

shihaya at matavnet.hu wrote: 
 > Hi! 
 > 
 > A have 2 computer labs, one with static IP 192.168.10.30- 
 > 192.168.10.45, another 192.168.10.50-192.168.10.65. 
 > 
 > I'd like forbid internet use in labor1 monday 10-12 AM. 
 > 
 > I tried: 
 > 
 > acl labor1 src 192.168.10.30-192.168.10.45/255.255.255.0 
 


Here you want 
 


acl labor1 src 192.168.10.30-192.168.10.45 
 


or alternatively one of 
 acl labor1 src 192.168.10.30-192.168.10.45/32 
 acl labor1 src 192.168.10.30-192.168.10.45/255.255.255.255 
 



IP ranges and netmasks do not generally mix well.. only case where you can mix 
 them is if you want to make a range of whole networks. 
 



- -- 
Automatic actions for USB cameras, cardreaders, memory sticks, MP3 players
http://warmcat.com/usbautocam
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBMvMQjKeDCxMJCTIRAiJjAJwMNth8nkOKiIzYcWtah7GNqsXYMACdGxER
9JKMIpIvRDy0LGOVf3LTdvo=
=Rcsb
-----END PGP SIGNATURE-----





More information about the fedora-list mailing list