Re: cachemgr.cgi & security???

CGI programs are run by HTTP servers. In order to user cachemgr.cgi, you
first need an HTTP server to run it. This may or may not be on the same
machine as your squid.

You access your cachemgr.cgi program like any other CGI program, say by
browsing to

        http://your.http.server/cgi-bin/cachemgr.cgi

Access to this URL can be restricted using your HTTP server's normal
access control mechanism.

Accessing this URL will give you a form that you fill in. You tell the
cachemgr.cgi program which squid cache you are interested in. Only then
will cachemgr.cgi contact the squid cache and extract information.

The squid cache will see the request for information coming in from the
host that runs your HTTP server (not from the machine running your
browser). Squid should be configured to honour such requests from this
host only (in squid.conf).

Hopefully, I have expressed myself more clearly this time.

-- 
-----------------------------------------------------------------
Dipl.-Inform. Martin Ibert, BB-DATA GmbH, phone: +49-30-245-56582
Brunnenstraße 111, D-13355 Berlin, Germany, fax: +49-30-245-56577
--------------------------------------- mailto:mib@ppe.bb-data.de