Re: Questions about POST, PUT and restrictions

On Thu, 28 Oct 1999, Udo Wolter wrote:

> Hi !
>
> I have some questions concerning POST, PUT and restrictions for these
> methods.
>
> At first I have to say, that we don't want to have much data-output from
> our internal users to the outside world. So we try to restrict
> POST-Commands with:
>
> request_size 10 KB
>
> As we could see, this doesn't work, because we can send huge POST-Requests
> ( > 800KB seemed to be no problem) outside.

I assume you are using squid 2.2.X.
The 'request_size' parameter won't do what you want.

In version 2.3, there are new options that *will* do what you want.
There you can limit the size of a request body.

 
> We have been also very happy that FTP-PUT has been impossible, but
> now we read about PUT is possible.
>
> 1. How to do a FTP-Put via squid ?

% client -m PUT -P input-file ftp://user:pass@ftp.host.com/path

> 2. How to prevent it ?

acl FTP proto FTP
acl PUT method PUT
http_access deny FTP PUT

Duane W.
Received on Thu Oct 28 1999 - 13:10:05 MDT