#3009 [SQUID module] http_access order and deprecated options

Following the #1859000 (please read the comment I add there).

Webmin 1.390 rpm under RedHat EL3 Server.
Squid 2.6 stable 17 (from tar.gz).

To replay the bug :
- add proxy restriction (for example allow all)
- save
- see the order of http_access

In miscellaneous options, I can see http accel.

In attachment the squid.conf.default file.

[Anonymous]

squid.conf.default v2.6stable17

[Jamie Cameron]

Logged In: YES
user_id=129364
Originator: NO

Ok, I see what you mean now - I will fix Webmin for the next release so that it no longer un-necessarily moves http_access directives like this.

[Anonymous]

Logged In: YES
user_id=1715321
Originator: YES

Hi Jamie,

Now I use :
Webmin 1.400 rpm under RedHat EL3 update 9 Server.
Squid 2.6 stable 18 (build from tar.gz).

There is ever a bug with the order of http_access : the order is reversed under the "Proxy restrictions" when you create a new restriction.

Furthermore, I note some new acl created will be down (last) : would it be possible have some arrow (move) under the "Access control lists" like under the "Proxy restrictions" ?

Thanks a lot.

[Jamie Cameron]

Logged In: YES
user_id=129364
Originator: NO

Hi linux_maniak,

I'm not sure what you mean by the order of http_access being invalid .. could you provide more details?

As for the ACLs, does the order even matter?

[Nobody/Anonymous]

Logged In: NO

- before any action, the order is
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all

- after creating a new restriction, the lines are reversed (webmin display and squid.conf) so first is "http_access deny all" and last is "http_access allow manager localhost"

For ACL, the order doesn't matter so it's a cosmetic feature.
But there is some order in the squid.conf (definition of network objects, ports, actions...) and it would be perfect to be able to put the new acl in the right section (action move with arrow up/down).

I hope to be clear.

[Anonymous]

Logged In: YES
user_id=1715321
Originator: YES

Sorry I forget to log in :(

[Jamie Cameron]

Logged In: YES
user_id=129364
Originator: NO

Ok, I see the problem - this can happen if not all http_access lines are after all acl lines, which may be needed if they refer to acls. I will fix this in the next Webmin release.

[Anonymous]

Squid configuration file

[Anonymous]

Logged In: YES
user_id=1715321
Originator: YES

Hi Jamie,

Thank you the order of restrictions is now ok, but :
- the lines are moved (see the squidconf.tgz attachment where squid.conf.default is the default configuration file and squid.conf is a conf where I created a new acl webip and I allowed localhost to webip and moved it before the last line : some lines of ACL are moved)
- action move with arrow up/down would be perfect in the "Access control lists" like under
the "Proxy restrictions" (sorry if I ask again)

Not squid but :
- "Un-used modules" are great !
- Where can I help french translation team ? (the new "un-used modules" and the very old "others" titles aren't translated)

Best regards.
File Added: squidconf.tgz

[Jamie Cameron]

Logged In: YES
user_id=129364
Originator: NO

Yes, Webmin does so re-ordering to ensure that http_access lines are after acl lines, which (as far as I know) is required by the Squid configuration format. I will try to make this less aggressive in future though, and will add the ability to move ACLs to my TODO list.

As for the french translation, there isn't really an official team - but check out :
http://www.webmin.com/modules-newlang.html

In particular the module that makes it easy to create and submit translations.