8

Executing the following command:

squid-k parse

I get the following warnings:

WARNING: (B) '127.0.0.1' is a subnetwork of (A) '127.0.0.1'
2014/03/19 16:43:41| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2014/03/19 16:43:41| WARNING: (B) '127.0.0.1' is a subnetwork of (A) '127.0.0.1'
2014/03/19 16:43:41| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2014/03/19 16:43:41| Processing: acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
2014/03/19 16:43:41| WARNING: (B) '127.0.0.0/8' is a subnetwork of (A) '127.0.0.0/8'
2014/03/19 16:43:41| WARNING: because of this '127.0.0.0/8' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '127.0.0.0/8' from the ACL named 'to_localhost'
2014/03/19 16:43:41| WARNING: (B) '0.0.0.0' is a subnetwork of (A) '0.0.0.0'
2014/03/19 16:43:41| WARNING: because of this '0.0.0.0' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '0.0.0.0' from the ACL named 'to_localhost'
2014/03/19 16:43:41| WARNING: (B) '0.0.0.0' is a subnetwork of (A) '0.0.0.0'
2014/03/19 16:43:41| WARNING: because of this '0.0.0.0' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '0.0.0.0' from the ACL named 'to_localhost'

The squid proxy service up and running but I do not like leaving these warnings.

These are the ACLs that are presenting problem: 

acl all src all
acl manager1 proto cache_object
acl localhost src 127.0.0.1/32 192.168.1.29/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32

Thanks in Advances.

Improve this question
1
  • What's your actual question here? Did you try just doing what it suggests?
    – Ƭᴇcʜιᴇ007
    Mar 19, 2014 at 21:48

2 Answers 2

Reset to default
-1

Not terribly familiar with this setup, but it would appear to be the 4th line of the ACL. 0.0.0.0/32 encompasses the entire IPv4 address space. Specifying 127.0.0.0/8 is redundant. Try removing one and see if the warnings go away.

Improve this answer
1
  • 2
    /32 means exactly that address (all 32 bits), not none of the bits - so that matches no address. This special case is called the "unspecified address," and is treated as the source address for "this host on this network" - it's roughly equivalent to 127.0.0.1 in practice. Despite that practical duplication, it's not the cause of the error in the question. The other much later answer here explains what the actual problem is. :)
    – dannysauer
    May 29, 2017 at 19:05
20

I'm a year late to the party, but the answer is that sometime from 3.2 to 3.4 the localhost, to_localhost and manager acls became builtin to squid3. Since you are redefining them in your squid.conf and yet are not changing the effective network sub-class, squid generates a warning error.

The solution, unless you really do want to redefine them, is to remove the definitions of localhost, to_localhost and manager from the acl definitions in squid.conf.

Improve this answer
2
  • It appears to be in the 3.1 to 3.2 update.
    – Zoredache
    Oct 15, 2015 at 17:31
  • Mine was in debian7->8 which is 3.2 -> 3.4. Thanks Nick.
    – isaaclw
    Aug 31, 2016 at 18:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .