I have compiled 3.head(revno 12695) and then the while performing squid
operations using default squid.conf I get a list of warnings regarding
ACLs and SPLAY TREE.
squid -v
Squid Cache: Version 3.HEAD-BZR
configure options: '--prefix=/usr/local/squid'
'--disable-dependency-tracking' '--enable-arp-acl'
'--enable-follow-x-forwarded-for' '--enable-auth'
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SMB,getpwnam,MSNT-multi-domain,SASL,DB,POP3,RADIUS'
'--enable-ntlm-auth-helpers=smb_lm,no_check,fakeauth'
'--enable-digest-auth-helpers=password,ldap,eDirectory'
'--enable-negotiate-auth-helpers=squid_kerb_auth'
'--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group'
'--enable-cache-digests' '--enable-cachemgr-hostname=localhost'
'--enable-delay-pools' '--enable-epoll' '--enable-icap-client'
'--enable-ident-lookups' '--enable-linux-netfilter'
'--enable-referer-log' '--enable-removal-policies=heap,lru'
'--enable-snmp' '--enable-ssl' '-enable-storeio=ufs,aufs,diskd,rock'
'--enable-useragent-log' '--enable-wccpv2' '--enable-esi' '--with-aio'
'--with-default-user=squid' '--with-filedescriptors=65535' '--with-dl'
'--with-openssl' '--with-pthreads' '--enable-ltdl-convenience'
'build_alias=x86_64-unknown-linux-gnu'
'host_alias=x86_64-unknown-linux-gnu' 'target_alias=x86_64-redhat-linux-gnu'
Is it suppose to be like that? it wasn't like that in revno 12552.
##output start
2013/02/17 12:07:36| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2013/02/17 12:07:36| WARNING: because of this '::/0' is ignored to keep
splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove '::/0' from the
ACL named 'all'
2013/02/17 12:07:36| WARNING: (B) '127.0.0.1' is a subnetwork of (A)
'127.0.0.1'
2013/02/17 12:07:36| WARNING: because of this '127.0.0.1' is ignored to
keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove '127.0.0.1'
from the ACL named 'localhost'
2013/02/17 12:07:36| WARNING: (B) '127.0.0.0/8' is a subnetwork of (A)
'127.0.0.0/8'
2013/02/17 12:07:36| WARNING: because of this '127.0.0.0/8' is ignored
to keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove '127.0.0.0/8'
from the ACL named 'to_localhost'
2013/02/17 12:07:36| WARNING: (B) '10.0.0.0/8' is a subnetwork of (A)
'10.0.0.0/8'
2013/02/17 12:07:36| WARNING: because of this '10.0.0.0/8' is ignored to
keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove '10.0.0.0/8'
from the ACL named 'localnet'
2013/02/17 12:07:36| WARNING: (B) '172.16.0.0/12' is a subnetwork of (A)
'172.16.0.0/12'
2013/02/17 12:07:36| WARNING: because of this '172.16.0.0/12' is ignored
to keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove '172.16.0.0/12'
from the ACL named 'localnet'
2013/02/17 12:07:36| WARNING: (B) '192.168.0.0/16' is a subnetwork of
(A) '192.168.0.0/16'
2013/02/17 12:07:36| WARNING: because of this '192.168.0.0/16' is
ignored to keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove
'192.168.0.0/16' from the ACL named 'localnet'
2013/02/17 12:07:36| WARNING: (B) 'fc00::/7' is a subnetwork of (A)
'fc00::/7'
2013/02/17 12:07:36| WARNING: because of this 'fc00::/7' is ignored to
keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove 'fc00::/7' from
the ACL named 'localnet'
2013/02/17 12:07:36| WARNING: (B) 'fe80::/10' is a subnetwork of (A)
'fe80::/10'
2013/02/17 12:07:36| WARNING: because of this 'fe80::/10' is ignored to
keep splay tree searching predictable
2013/02/17 12:07:36| WARNING: You should probably remove 'fe80::/10'
from the ACL named 'localnet'
##output end
--
Eliezer Croitoru
http://www1.ngtech.co.il
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il
