cachemgr.cgi and plebs

From: Jason Lee <plastic@dont-contact.us>
Date: Sun, 25 Aug 1996 23:41:26 +1000 (EST)

Stephane Bortzmeyer writes:
]
] As Martin Gleeson said, Squid will see the request coming from the Web
] server so you should authorize its address (and tune httpd.conf to be
] sure the Web server allows only your station to run that cachemgr.cgi
] script).

Is there anything wrong with letting normal pleb users access
cachemgr.cgi? I can't think of any obvious security concerns, there is
nothing too secret about squid.conf. Is performance a problem? I guess
while users are looking at cache_object URLs they're not looking at
others.

Jason.

-- 
	zeros and ones will take us there....
	peace. plastic. 1996.
Received on Sun Aug 25 1996 - 06:43:29 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:32:51 MST