On Thu, April 5, 2007 2:04 pm, Christopher Sawtell wrote:
> On Thu, 05 Apr 2007 13:49:21 Nick Rout wrote:
>> On Thu, April 5, 2007 1:39 pm, Christopher Sawtell wrote:
>> > Greeets CLUGgers,
>> >
>> > If one tries to access an IPCop from behind another IPCop with the
>> Squid
>> > cache
>> > turned on and in use by the browser you get an access denied message
>> from
>> > the
>> > cache. OTOH, if you set the browser to access the Internet directly,
>> you
>> > are
>> > allowed to access the remote IPCop's config web site.
>> >
>> > Is this a feature or a bug?
>>
>> If you cannot access a site outside your own with the cache turned on,
>> but
>> you can with the cache turned off then it is clearly a bug. How could it
>> possibly be regarded as a feature?
>
> I imagine because the cache would/could ( ? ) store details which should
> be
> private to the remote IPCop site. Local users could then ( posssibly ) get
> access to those details later.

I thought you might say something like that, but then wouldn't the same
apply to any secured website? I log into numerous forums and other
websites every day. Most of the forums are not ssl protected. ipcop on the
other hand is always ssl protected, any request to port 81 is redirected
to https on port 445.


Probably something for the ipcop email list.

> --
> CS
>
>


-- 
Nick Rout

Reply via email to