Squid Network - Warning subnetwork

Executing the following command:

squid-k parse

I get the following warnings:

WARNING: (B) '127.0.0.1' is a subnetwork of (A) '127.0.0.1'
2014/03/19 16:43:41| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2014/03/19 16:43:41| WARNING: (B) '127.0.0.1' is a subnetwork of (A) '127.0.0.1'
2014/03/19 16:43:41| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2014/03/19 16:43:41| Processing: acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
2014/03/19 16:43:41| WARNING: (B) '127.0.0.0/8' is a subnetwork of (A) '127.0.0.0/8'
2014/03/19 16:43:41| WARNING: because of this '127.0.0.0/8' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '127.0.0.0/8' from the ACL named 'to_localhost'
2014/03/19 16:43:41| WARNING: (B) '0.0.0.0' is a subnetwork of (A) '0.0.0.0'
2014/03/19 16:43:41| WARNING: because of this '0.0.0.0' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '0.0.0.0' from the ACL named 'to_localhost'
2014/03/19 16:43:41| WARNING: (B) '0.0.0.0' is a subnetwork of (A) '0.0.0.0'
2014/03/19 16:43:41| WARNING: because of this '0.0.0.0' is ignored to keep splay tree searching predictable
2014/03/19 16:43:41| WARNING: You should probably remove '0.0.0.0' from the ACL named 'to_localhost'

The squid proxy service up and running but I do not like leaving these warnings.

These are the ACLs that are presenting problem:

acl all src all
acl manager1 proto cache_object
acl localhost src 127.0.0.1/32 192.168.1.29/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32

Thanks in Advances.


Solution 1:

I'm a year late to the party, but the answer is that sometime from 3.2 to 3.4 the localhost, to_localhost and manager acls became builtin to squid3. Since you are redefining them in your squid.conf and yet are not changing the effective network sub-class, squid generates a warning error.

The solution, unless you really do want to redefine them, is to remove the definitions of localhost, to_localhost and manager from the acl definitions in squid.conf.