[squid-users] RE: 2.4STABLE1 & authentication & FTP - BUG

The client machines have no route to the Internet. If they do not go via
the proxy it is impossible for them to get out.

-----Original Message-----
From: Marco Rovegno [mailto:marco@mardecopas.com]
Sent: Saturday, August 11, 2001 05:06
To: Ken Thomson; 'squid-users@squid-cache.org'
Subject: Re: [squid-users] 2.4STABLE1 & authentication & FTP - BUG

There are some IE explorer that connect directly to internet istead of
using the configured proxy settings, that is noted on the BANDWITH HOW-
TO.

Smr

> I have noticed what appears to be a bug in Squid 2.4STABLE1.
>
> If you have user authentication (ie. an acl with proxy_auth REQUIRED
set on)
> and try to access a FTP site via squid and cancel the authentication
request
> windows, you can still get at any directory/file and start a file
download.
> You do not need to be authenticated!
>
> The reason for this is that Squid renders the FTP directory in the
browser
> prior to prompting for authentication. So you can cancel the
authentication
> and proceed as normal by clicking links and continually cancelling the
> authentication requests.
>
> Anyone else experience this?
>
> Regards,
> Ken.
>
>
Received on Sun Aug 12 2001 - 18:35:33 MDT