rousskov [Tue, 16 Oct 2007 21:57:28 +0000 (21:57 +0000)]
Bug 2104 fix: handle REQMOD HTTP responses without body
When in request satisfaction mode and no body is expected, mark the store
entry as complete. Otherwise the ClientStreams(?) triggered by the
clientGetMoreData call will get stuck waiting for more data from the store.
There is probably a better way to do this (e.g., completely bypassing store).
The tunnelConnectTimeout function used the tunnelState object (and propably
the tunnelState->request object) after they were freed by the comm_close call.
The fix moves the comm_close call to the end of tunnelConnectTimeout.
amosjeffries [Tue, 16 Oct 2007 18:56:51 +0000 (18:56 +0000)]
Alter policy of ICP and HTCP access to default allow only local networks
Modifies both icp_access and htcp_access from recommended 'allow all'
to a default 'deny !localnet' with a fallback default 'deny all'
if the recommended icp/htcp access are removed or commented out.
Adds localnet acl by default the RFC1918 reserved private space
to support the use of localnet acl in the above.
amosjeffries [Sat, 13 Oct 2007 12:57:40 +0000 (12:57 +0000)]
Add notes about htcp_access effects on HTCP peers to config.
Discovered by Tony Dodd and Chris Robertson.
See Discussion:
Re: [squid-users] Squid marks alive siblings as dead.
http://www.squid-cache.org/mail-archive/squid-users/200710/0254.html
hno [Sat, 13 Oct 2007 06:02:28 +0000 (06:02 +0000)]
Bug #2100: Respect DNS ttl=0
Some DNS servers responds with a ttl=0 asking their results to not be cached
for long, but due to historical reasons from before when Squid had an internal
DNS client such DNS responses got cached for the positive DNS ttl (default 1 hour).
Witch this change such DNS responses gets cached for the minimum allowed TTL
(negative_dns_ttl, default 1 minute).
wessels [Thu, 4 Oct 2007 22:43:54 +0000 (22:43 +0000)]
Likely fix for helper-related SEGV shortly after reconfigure
I'm seeing occasional SEGVs in helperHandleRead() shortly after
a reconfigure. I suspect that the helper structure was kept
around during the reconfigure because of a pending request. If
it gets closed in helperHandleRead() after reading, then we must
return from the function rather than continue in the while loop.
Boost redirector cache.log message to indicate <NULL> also received when
redirector returns an empty URL as destination.
Was just when NULL pointer received.
Do not disable ICAP preview by default. Now, by default, the preview will be
used for ICAP servers that request it. For a discussion, please see
http://www.squid-cache.org/mail-archive/squid-dev/200709/0066.html
Warn users that multiple ICAP services per icap_class are not yet supported.
Despite the warning, we still allow them in the configuration file, but that
may change. This warning may help to make the transition smoother.
Forward port of latest tproxy changes from SQUID 2:
- Automatically disable tproxy if the needed capabilities could not be set
- Keep the permitted set unless root privileges is completely dropped (chroot),
as is normally done when not using capabilities. This fixes file permissions
regarding the pid file.
- Test for sys/capability.h linux include file to avoid failing on systems missing libcap
Fix a compile-time memory corruption error causing cf_gen to fail
The change to include dependency tracking had a small memory allocation
error resulting in memory corruption, causing cf_gen to fail during the
compile on some platforms/compilers.
Polished "Major new features" list to downplay the importance of ESI and
related code changes (because nobody currently supports ESI modifications
amd they have known bugs).
Did not update the .html version for the lack of linuxdoc installation.
Author: Thomas-Martin Seck <tmseck@netcologne.de>
Bug #2071: SNMP not enabled on FreeBSD on some other systems
While investigating the SNMP linking issue, I noticed that configure.in contains
a bashism that will effectively disable SNMP support in environments where bash
is not present (e.g. a bare FreeBSD environment with a rather puristic
/bin/sh).
Bug 2067: do not print "aborting on premature eof" messages at debug level 1.
This messages are printed, for example, whenever the origin server closes
the connection prematurely. No need to warn the cache admin about such events.
More squid.conf reordering to get the dependencies between options sorted proper
this patch also adds an automatic dependency verification to cf_gen,
reducing the risk of this kind of confusing ordering of the directives.
driven by the new cf.data.depend file listing the directive types and
their dependencies.
Adjust default pconn timeouts to avoid shutting down connection while child sends request
The default pconn_timeout / persistent_request_timeout values was selected
a bit unfortunate. persistent_request_timeout should be bigger than
pconn_timeout, or we may risk closing the connection while a child sends
the next request.
projects / thirdparty / squid.git / log
