Re: [squid-users] 2.4STABLE1 & authentication & FTP - BUG

From: Marco Rovegno <marco@dont-contact.us>
Date: Fri, 10 Aug 2001 14:05:52 -0500

There are some IE explorer that connect directly to internet istead of
using the configured proxy settings, that is noted on the BANDWITH HOW-
TO.

Smr

> I have noticed what appears to be a bug in Squid 2.4STABLE1.
>
> If you have user authentication (ie. an acl with proxy_auth REQUIRED
set on)
> and try to access a FTP site via squid and cancel the authentication
request
> windows, you can still get at any directory/file and start a file
download.
> You do not need to be authenticated!
>
> The reason for this is that Squid renders the FTP directory in the
browser
> prior to prompting for authentication. So you can cancel the
authentication
> and proceed as normal by clicking links and continually cancelling the
> authentication requests.
>
> Anyone else experience this?
>
> Regards,
> Ken.
>
>
Received on Fri Aug 10 2001 - 13:03:22 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:01:34 MST