Re: [SQU] Truncated FileMaker Pro Query

From: Merton Campbell Crockett <mcc@dont-contact.us>
Date: Tue, 17 Oct 2000 06:02:29 -0700 (PDT)

On Tue, 17 Oct 2000, Henrik Nordstrom wrote:

> Merton Campbell Crockett wrote:
>
> > The problem that occurs is that when a user clicks on the anchor the query
> > is truncated when the user's browser is configured to use a Squid proxy.
> > Squid truncates the URL at the end of the "FMPRO?" string and fails to send
> > the FileMaker Pro command line arguments.
>
>
> Odd.. have never seen anything like behaviour that before.
>
> Note that Squids access.log truncates query parameters for security
> reasons, but they are still forwarded.
>
> Are you positively sure that there is no spaces in the URL?

Henrik:

The only space is the hex-encoded space (%20) in the name of the FileMaker
Pro database.

        <A HREF="http://www-eol2.mtv.gtegsc.com:591/pir/FMPRO?
        -db=PIR%20Database&-Lay=web_new&-Format=pir_new.htm&-View">
        Submit a Process Improvement Request (PIR)</A>

Thanks for responding. You didn't have the answer but did have the question
needed for me to find the answer.

I have been using Squid for the last 5 years. One thing that I overlooked
when moving to Squid 2.2STABLE5 was the additional ACL that was included in
the default configuration file, Safe_ports.

The port used in the URL is 591, a "privileged" port that is denied by the
following rule.

        http_access deny !Safe_ports

The "simple" solution is to add another ACL and change the rule.

        ACL FMPRO_port port 591
        .
        .
        .
        http_access deny !Safe_ports !FMPRO_port

There probably is a more elegant solution that would only permit the port
being used for the specific host but this will suffice for now.

Thanks for the question.

Merton Campbell Crockett

--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Tue Oct 17 2000 - 22:20:50 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:55:46 MST