Re: [squid-users] Proxy-Chaining

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 16 Feb 2004 17:11:00 +0100 (CET)

On Mon, 16 Feb 2004, Dr. Michael Weller wrote:

> While mixing both directives seems superfluous and don't know right now
> which one takes precedence, it shouldn't do any harm though.

always_direct allow has a higher priority than never_direct allow.

Default for both is deny.

> Just a guess: The default setting for the maximum size of http requests,
> ak posts, seems small in squid. I always have to increase it. The default
> seems to be big enough for small forms.. but nowayadays...

There is a size limit in Squid for the request size which may impact huge
GET requests such as enormous cookies or a very large form submitted via
GET instead of POST.

For POST data the default is no limit since Squid-2.5 (or maybe even 2.4,
don't remember).

Both can be tuned in squd.conf.

> AFAIK, there is no way to block POSTS alone by acls, so the problem should
> be elsewhere, but I might be mistaken.

There is no problem blocking POSTS alone by acls. POST is just a method
like any other HTTP method and can be matched by the method acl type.

Regards
Henrik
Received on Mon Feb 16 2004 - 09:11:10 MST

This archive was generated by hypermail pre-2.1.9 : Mon Mar 01 2004 - 12:00:02 MST