#3009 [SQUID module] http_access order and deprecated options

1.400
closed-fixed
5
2008-03-08
2007-12-28
No

Following the #1859000 (please read the comment I add there).

Webmin 1.390 rpm under RedHat EL3 Server.
Squid 2.6 stable 17 (from tar.gz).

To replay the bug :
- add proxy restriction (for example allow all)
- save
- see the order of http_access

In miscellaneous options, I can see http accel.

In attachment the squid.conf.default file.

Discussion

  • Anonymous - 2007-12-28

    squid.conf.default v2.6stable17

     
  • Jamie Cameron

    Jamie Cameron - 2007-12-28

    Logged In: YES
    user_id=129364
    Originator: NO

    Ok, I see what you mean now - I will fix Webmin for the next release so that it no longer un-necessarily moves http_access directives like this.

     
  • Jamie Cameron

    Jamie Cameron - 2007-12-28
    • status: open --> closed-fixed
     
  • Anonymous - 2008-03-07

    Logged In: YES
    user_id=1715321
    Originator: YES

    Hi Jamie,

    Now I use :
    Webmin 1.400 rpm under RedHat EL3 update 9 Server.
    Squid 2.6 stable 18 (build from tar.gz).

    There is ever a bug with the order of http_access : the order is reversed under the "Proxy restrictions" when you create a new restriction.

    Furthermore, I note some new acl created will be down (last) : would it be possible have some arrow (move) under the "Access control lists" like under the "Proxy restrictions" ?

    Thanks a lot.

     
  • Anonymous - 2008-03-07
    • milestone: 790619 --> 1.400
    • status: closed-fixed --> open-invalid
     
  • Jamie Cameron

    Jamie Cameron - 2008-03-07

    Logged In: YES
    user_id=129364
    Originator: NO

    Hi linux_maniak,

    I'm not sure what you mean by the order of http_access being invalid .. could you provide more details?

    As for the ACLs, does the order even matter?

     
  • Nobody/Anonymous

    Logged In: NO

    - before any action, the order is
    http_access allow manager localhost
    http_access deny manager
    http_access deny !Safe_ports
    http_access deny CONNECT !SSL_ports
    http_access allow localhost
    http_access deny all

    - after creating a new restriction, the lines are reversed (webmin display and squid.conf) so first is "http_access deny all" and last is "http_access allow manager localhost"

    For ACL, the order doesn't matter so it's a cosmetic feature.
    But there is some order in the squid.conf (definition of network objects, ports, actions...) and it would be perfect to be able to put the new acl in the right section (action move with arrow up/down).

    I hope to be clear.

     
  • Anonymous - 2008-03-07

    Logged In: YES
    user_id=1715321
    Originator: YES

    Sorry I forget to log in :(

     
  • Jamie Cameron

    Jamie Cameron - 2008-03-08
    • status: open-invalid --> closed-fixed
     
  • Jamie Cameron

    Jamie Cameron - 2008-03-08

    Logged In: YES
    user_id=129364
    Originator: NO

    Ok, I see the problem - this can happen if not all http_access lines are after all acl lines, which may be needed if they refer to acls. I will fix this in the next Webmin release.

     
  • Anonymous - 2008-03-27

    Squid configuration file

     
  • Anonymous - 2008-03-27

    Logged In: YES
    user_id=1715321
    Originator: YES

    Hi Jamie,

    Thank you the order of restrictions is now ok, but :
    - the lines are moved (see the squidconf.tgz attachment where squid.conf.default is the default configuration file and squid.conf is a conf where I created a new acl webip and I allowed localhost to webip and moved it before the last line : some lines of ACL are moved)
    - action move with arrow up/down would be perfect in the "Access control lists" like under
    the "Proxy restrictions" (sorry if I ask again)

    Not squid but :
    - "Un-used modules" are great !
    - Where can I help french translation team ? (the new "un-used modules" and the very old "others" titles aren't translated)

    Best regards.
    File Added: squidconf.tgz

     
  • Jamie Cameron

    Jamie Cameron - 2008-03-29

    Logged In: YES
    user_id=129364
    Originator: NO

    Yes, Webmin does so re-ordering to ensure that http_access lines are after acl lines, which (as far as I know) is required by the Squid configuration format. I will try to make this less aggressive in future though, and will add the ability to move ACLs to my TODO list.

    As for the french translation, there isn't really an official team - but check out :
    http://www.webmin.com/modules-newlang.html

    In particular the module that makes it easy to create and submit translations.

     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks