Re: cvs commit: squid3/src cf.data.pre

2008-02-10 Thread Amos Jeffries 
 hno 2008/02/08 04:20:28 MST

   Modified files:
 src  cf.data.pre
   Log:
   Restrict the cgi-bin refresh pattern to just */cgi-bin/*

   Revision  ChangesPath
   1.500 +1 -1  squid3/src/cf.data.pre



That would be a violation of the RFC would it not?
The wordign tome read taht it was more pworried about \? requests than
cgi-bin ones. Though both might have the same problems.

Amos

Re: cvs commit: squid3/src cf.data.pre ftp.cc structs.h

2008-01-19 Thread Amos Jeffries 

Amos Jeffries wrote:

amosjeffries2008/01/19 00:15:30 MST

  Modified files:
src  cf.data.pre ftp.cc structs.h 
  Log:

  EPSV support for FTP and other fixes.
  
  - Adds full EPSV method support for FTP server connections

  - Fixes debugging in FTP state machine into specific levels:
* 0: critical problems
* 1: non-critical problems
* 2: FTP protocol chatter
* 3: FTP logic flow debugging
* 5: FTP data parsing flows
  - Adds code documentation to some FTP functions.


Forgot to mention the addition of 'ftp_epsv_all' squid.conf option to 
enable/disable FTP 'EPSV ALL' extension capabilities for NAT traversal.

Documented in squid.conf.default anyway.

Amos
--
Please use Squid 2.6STABLE17+ or 3.0STABLE1+
There are serious security advisories out on all earlier releases.