Make CONNECT ACL a built-in default

This really should have been done earlier when the other fixed-value ACLs were made built-in

diff --git a/doc/release-notes/release-5.sgml b/doc/release-notes/release-5.sgml
index 818f637cbe9cb9e0c3aec8b73f951e8fb176c8ad..58e6122bf5ce6e34e556ebf1e38f7ab3a13301fd 100644 (file)
--- a/doc/release-notes/release-5.sgml
+++ b/doc/release-notes/release-5.sgml
@@ -85,7 +85,8 @@ This section gives a thorough account of those changes in three categories:
 <sect1>Changes to existing directives<label id="modifieddirectives">
 <p>
 <descrip>
-       <p>No changes to existing directives in this version.
+       <tag>acl</tag>
+       <p>The <em>CONNECT</em> ACL definition is now built-in.
 
 </descrip>
 

diff --git a/src/cf.data.pre b/src/cf.data.pre
index 57bd8a09e2bf0a941f2ba21124bcc6903523e3f1..d1a9fb047b7656863c1b2f3081e25685a5cdecb0 100644 (file)
--- a/src/cf.data.pre
+++ b/src/cf.data.pre
@@ -954,7 +954,8 @@ DEFAULT: all src all
 DEFAULT: manager url_regex -i ^cache_object:// +i ^https?://[^/]+/squid-internal-mgr/
 DEFAULT: localhost src 127.0.0.1/32 ::1
 DEFAULT: to_localhost dst 127.0.0.0/8 0.0.0.0/32 ::1
-DEFAULT_DOC: ACLs all, manager, localhost, and to_localhost are predefined.
+DEFAULT: acl CONNECT method CONNECT
+DEFAULT_DOC: ACLs all, manager, localhost, to_localhost, and CONNECT are predefined.
 DOC_START
        Defining an Access List
 
@@ -1365,7 +1366,6 @@ acl Safe_ports port 280           # http-mgmt
 acl Safe_ports port 488                # gss-http
 acl Safe_ports port 591                # filemaker
 acl Safe_ports port 777                # multiling http
-acl CONNECT method CONNECT
 NOCOMMENT_END
 DOC_END