Can Bican wrote:
> I don't see how my instance is different from the rule on that page,
> that goes like:
> 
> REDIRECT  loc:!192.168.1.5,192.168.1.33\
>                      3128     tcp      www              -
> !206.124.146.177,130.252.100.0/24
> 
> In my example, $SPECIFICIP and $SQUIDHOST are more less the same (I
> had to mention they're supposed to be in params file), except that
> both are a /32.
> 

I understood that the OP wanted to exclude requests addressed to a
particular IP range. If that is the case, then Jose's post is much more
to the point.

Yours puts $SQUIDHOST in the ORIGINAL DEST column which isn't what the
OP wanted to do at all, if I understand correctly. And placing
exclusions in the SOURCE column just muddies the waters.

My $.02
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to