Back to original squid.conf:

Instead of
follow_x_forwarded_for allow localhost
acl forwardTrafficSubnet1 src 172.21.120.0/24
cache_peer 172.21.120.24 parent 8881 0 proxy-only no-query
cache_peer_access 172.21.120.24 deny forwardTrafficSubnet1
never_direct deny forwardTrafficSubnet1
cache_peer_access 172.21.120.24 allow all
never_direct allow all 

I would use 

follow_x_forwarded_for allow localhost
acl forwardTrafficSubnet1 src 172.21.120.0/24
cache_peer 172.21.120.24 parent 8881 0 proxy-only no-query
cache_peer_access 172.21.120.24 deny forwardTrafficSubnet1
always_direct allow forwardTrafficSubnet1
#never_direct deny forwardTrafficSubnet1     Looks like double negation: NOT
Never-DIRECT
cache_peer_access 172.21.120.24 allow all
never_direct allow all 



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/X-Forwarded-For-and-cache-peer-access-tp4661082p4661506.html
Sent from the Squid - Users mailing list archive at Nabble.com.

Reply via email to