Re: [squid-users] acl using Content-Length

From: Leonardo Rodrigues <leolistas_at_solutti.com.br>
Date: Mon, 14 Sep 2009 10:35:10 -0300

Mikio Kishi escreveu:
>
>> For example
>>
>> acl MAX100Mbyte rep_max_content_length 100M
>>
>>
>
> Is it possible ?
>

    not directly that way ..... you'll have to use
reply_body_max_size for that.

    you'll have to define your other ACLs and merge them with
reply_body_max_size which takes the maximum size as argument.

# TAG: reply_body_max_size bytes allow|deny acl acl...
# This option specifies the maximum size of a reply body in bytes.
# It can be used to prevent users from downloading very large files,
# such as MP3's and movies. When the reply headers are received,
# the reply_body_max_size lines are processed, and the first line with
# a result of "allow" is used as the maximum body size for this reply.
# This size is checked twice. First when we get the reply headers,
# we check the content-length value. If the content length value
exists
# and is larger than the allowed size, the request is denied and the
# user receives an error message that says "the request or reply
# is too large." If there is no content-length, and the reply
# size exceeds this limit, the client's connection is just closed
# and they will receive a partial reply.
#
# WARNING: downstream caches probably can not detect a partial reply
# if there is no content-length header, so they will cache
# partial responses and give them out as hits. You should NOT
# use this option if you have downstream caches.
#

-- 
	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br
	Minha armadilha de SPAM, NÃO mandem email
	gertrudes_at_solutti.com.br
	My SPAMTRAP, do not email it
Received on Mon Sep 14 2009 - 13:35:25 MDT

This archive was generated by hypermail 2.2.0 : Mon Sep 14 2009 - 12:00:04 MDT