Re: New squid packages 2.4.6-2woody9 restarts very often.

[Daniel Hess <daniel@rio-grande.ping.de>]

Hi Luigi,

On Tue, Jul 26, 2005 at 09:11:31AM +0200, Luigi Gangitano wrote:
> this surely helps. Can you please tell me what DNS daemon is at work in
> this case (eg. bind, pdnsd, etc.)?

I've investigated a bit further.

With the default config (with minimal changes so that the lan-clients
can use the proxy) the problem does not occur.

It starts to fail when the dstdom_regex acl is activated.

While playing with gdb i found an reverse query about the ip (from the
url requested).

A patch to the default config follows.

Thanks for your efforts.

  - Daniel

--- squid.conf	Tue Aug 23 02:25:12 2005
+++ /etc/squid.conf	Tue Aug 23 02:23:20 2005
@@ -1405,8 +1405,6 @@
 #
 #Recommended minimum configuration:
 acl all src 0.0.0.0/0.0.0.0
+acl lan src 192.168.0.0/255.255.0.0
+acl microsoft dstdom_regex -i microsoft\.com$
 acl manager proto cache_object
 acl localhost src 127.0.0.1/255.255.255.255
 acl SSL_ports port 443 563
@@ -1462,8 +1460,6 @@
 #
 http_access allow localhost
 # And finally deny all other access to this proxy
+http_access allow microsoft
+http_access allow lan
 http_access deny all
 
 #  TAG: icp_access