Hi, 

Henrik, that works fine, many thanks. 

I found that when using 

        never_direct all

, one might also use

        always_direct allow nowhere

instead of 

        http_access deny nowhere

In that setup, you even get the right error message 

"Name Error: The domain name does not exist." 

instead of

"Access Denied."

from the cache :-) 

Fine. That's exactely what I wanted. 

Regards, Sven 

-----Urspr�ngliche Nachricht-----
Von: Henrik Nordstrom [mailto:[EMAIL PROTECTED]
Gesendet: Dienstag, 16. Dezember 2003 17:25
An: Paas, Sven
Cc: 'Henrik Nordstrom'; '[EMAIL PROTECTED]'
Betreff: Re: [squid-users] Rejecting URLs with unresolvable DNS hosts?


Right.. should check things before answering..

If Suqid can not resolve an IP address is uses the address 255.255.255.255 
in access controls, so to deny unresolved addresses you can

  acl nowhere dst 255.255.255.255
  http_access deny nowhere

(this time the answer is verified)

Reply via email to