From owner-freebsd-stable  Wed Apr  8 00:20:12 1998
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id AAA05895
          for freebsd-stable-outgoing; Wed, 8 Apr 1998 00:20:12 -0700 (PDT)
          (envelope-from owner-freebsd-stable@FreeBSD.ORG)
Received: from ns2.x-link.ml.org (ns2.x-link.ml.org [163.195.1.237])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id AAA05623
          for <freebsd-stable@FreeBSD.ORG>; Wed, 8 Apr 1998 00:18:52 -0700 (PDT)
          (envelope-from swhite@gov.za)
Received: from localhost (swhite@localhost)
	by ns2.x-link.ml.org (8.8.8/8.8.7) with SMTP id JAA20021;
	Wed, 8 Apr 1998 09:00:58 +0200 (SAT)
	(envelope-from swhite@gov.za)
Date: Wed, 8 Apr 1998 09:00:58 +0200 (SAT)
From: S White <swhite@gov.za>
X-Sender: swhite@ns2.x-link.ml.org
To: Tom <tom@uniserve.com>
cc: "Daniel O'Connor" <doconnor@gsoft.com.au>,
        Ruslan Ermilov <ru@ucb.crimea.ua>, freebsd-stable@FreeBSD.ORG
Subject: Re: Simple IPFW question 
In-Reply-To: <Pine.BSF.3.96.980407181334.29136D-100000@shell.uniserve.com>
Message-ID: <Pine.BSF.3.96.980408085451.18999B-100000@ns2.x-link.ml.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk


On Tue, 7 Apr 1998, Tom wrote:

>   In httpd acceleration mode, squid is designed to accelerate access to a
> particular http server which you must define:
> 
> #       If you want to run squid as an httpd accelerator, define the
> #       host name and port number where the real HTTP server is.

Squid can also act as a transparent proxy for multiple web servers quite
happily with some tweaking. Been there, done that, love the T-shirt...

#  TAG: httpd_accel_uses_host_header
#       HTTP/1.1 requests include a Host: header which is basically the
#       hostname from the URL.  Squid can be an accelerator for
#       different HTTP servers by looking at this header.  However,
#       Squid does NOT check the value of the Host header, so it opens
#       a big security hole.  We recommend that this option remain
#       disabled unless you are sure of what you are doing.
#
httpd_accel_uses_host_header on

Since this isn't really a -stable issue, this will be my first and last
posting to the list on this issue... we can take it elsewhere if desired.
*grin*

Regards,
- Sean.




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message