Re: cachemgr.cgi & security???

Peter Olsson wrote:

> Please tell me I have gone completely crazy and this is impossible.
> Or what I can do about it.

You have gone completely crazy and this is impossible. At least not as
long as you put access control on the cache_object protocol.

As far as I understand things, things are meant to work as follows:

- Within squid, restrict access to the cache_object protocol to a host
  which you control.
- Within that host's HTTP server, restrict access to your cachemgr.cgi
  program as needed.

Then only you can get at the data, because only you can run the
cachemgr.cgi program on the trusted host, and squid won't honor requests
coming from other hosts.

-- 
-----------------------------------------------------------------
Dipl.-Inform. Martin Ibert, BB-DATA GmbH, phone: +49-30-245-56582
Brunnenstraße 111, D-13355 Berlin, Germany, fax: +49-30-245-56577
--------------------------------------- mailto:mib@ppe.bb-data.de