Marco D'Ettorre wrote:

> I noted that acl based reply_body_max_size works correctly ONLY if I add
> the acl in one of http_access directives!

> My acl is an EXTERNAL one (ldap_group in particular).

> reply_body_max_size 1000000 allow !unlimited

> This works only if I add
> http_access allow unlimited !unlimited
> that is never true and doesn't alter my access rules.

Likely reply_body_max_size is a fast lookup that cannot wait for slow
lookups, such as external helper calls, to complete. Using the acl in
http_access makes it already availabe to Squid, eliminating the wait in
reply_body_max_access.

Adam

Reply via email to