Right.. should check things before answering..

If Suqid can not resolve an IP address is uses the address 255.255.255.255 
in access controls, so to deny unresolved addresses you can

  acl nowhere dst 255.255.255.255
  http_access deny nowhere

(this time the answer is verified)

On Tue, 16 Dec 2003, Paas, Sven wrote:

> Hi, 
> 
> hmm, that does not work for me. With 
> 
>   acl everywhere dst 0.0.0.0/0
>   http_access deny !everywhere
>   http_access allow ournet_src all_dst
>   http_access deny all
> 
> my cache still throws all_dst to ANY_PARENT, when it 
> sees an unresolvable hostname. 
> 
> Sven 
> 

Reply via email to