Hi,
this is caused by the detection of selectively announced networks:
Dec 16 17:24:23 squid-asnbl-helper[4166] WARN: Destination 'www.foke.es' resolves to IP addresses 'fe80::ccde:4cff:fea2:57ae' without corresponding ASN, probably selectively announced
Dec 16 17:24:23 squid-asnbl-helper[4166] INFO: Denying access to destination 'www.foke.es' due to suspected selective announcements
For some reason, the folks at www.foke.es decided to put an IPv6 address into the DNS pointing to a non-routable IPv6 range - similar to 127.0.0.0/8
for IPv4. This triggers the anomaly detection.
$ dig +short aaaa www.foke.es
fe80::ccde:4cff:fea2:57ae
Similar to this thread, you can either…
- disable the detection of selectively announced networks completely or
- add
www.foke.es
to the list of allowed domains in the URL filter section, which bypasses the anomaly detection.
In addition, it might be a good thing to get in touch with the IT staff at www.foke.es, so they can fix or remove the faulty IPv6 address record - this is especially bad for people not having IPv4 connectivity anymore (and we all strive for that, don’t we ), since they cannot access this site at all.
Thanks, and best regards,
Peter Müller