J. Peng wrote:
Hello,
My squid for reverse proxy has the config like:
cache_peer 172.23.147.30 parent 80 0 no-query originserver name=RES
acl service_res dstdomain res.mail.xx.com res_css.mail.xx.com
res_js.mail.xx.com res_img.mail.xx.com res-css.mail.xx.com res-css.mai
l.xx.com res-js.mail.xx.com res-img.mail.xx.com
acl service_res dstdomain r7.mail.xx.com r7_css.mail.xx.com
r7_js.mail.xx.com r7_img.mail.xx.com r7-css.mail.xx.com
r7-js.mail.xx.co
m r7-img.mail.xx.com
cache_peer_access RES allow service_res
When I stop and start Squid I get the warnings in screen:
2008/02/22 14:44:35| WARNING: 'res-css.mail.xx.com' is a subdomain of
'res-css.mail.xx.com'
2008/02/22 14:44:35| WARNING: because of this 'res-css.mail.xx.com' is
ignored to keep splay tree searching predictable
2008/02/22 14:44:35| WARNING: You should probably remove
'res-css.mail.xx.com' from the ACL named 'service_res'
My squid seems to work well though. But why this happened? thanks.
Squid does some semi-intelligent checks to make sure you are not
duplicating information in any single ACL. Dropping redundant entries.
The dropped domain would have only matched the same or a subset of the
other domains matches.
Amos
--
Please use Squid 2.6STABLE17+ or 3.0STABLE1+
There are serious security advisories out on all earlier releases.
