From: Amos Jeffries Date: Sun, 30 Aug 2015 01:07:47 +0000 (-0700) Subject: Docs: update arp ACL text X-Git-Tag: SQUID_4_0_1~84 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=abe01913c27bc6b51f4b7988cac163fc541dbff9;p=thirdparty%2Fsquid.git Docs: update arp ACL text --- diff --git a/src/cf.data.pre b/src/cf.data.pre index 53e61cb82f..672550ce88 100644 --- a/src/cf.data.pre +++ b/src/cf.data.pre @@ -966,15 +966,17 @@ DOC_START acl aclname localip ip-address/mask ... # IP address the client connected to [fast] acl aclname arp mac-address ... (xx:xx:xx:xx:xx:xx notation) - # The arp ACL requires the special configure option --enable-arp-acl. - # Furthermore, the ARP ACL code is not portable to all operating systems. - # It works on Linux, Solaris, Windows, FreeBSD, and some - # other *BSD variants. # [fast] + # The 'arp' ACL code is not portable to all operating systems. + # It works on Linux, Solaris, Windows, FreeBSD, and some other + # BSD variants. # - # NOTE: Squid can only determine the MAC address for clients that are on - # the same subnet. If the client is on a different subnet, - # then Squid cannot find out its MAC address. + # NOTE: Squid can only determine the MAC/EUI address for IPv4 + # clients that are on the same subnet. If the client is on a + # different subnet, then Squid cannot find out its address. + # + # NOTE 2: IPv6 protocol does not contain ARP. MAC/EUI is either + # encoded directly in the IPv6 address or not available. acl aclname srcdomain .foo.com ... # reverse lookup, from client IP [slow]