[squid-users] ACL to match %AA

From: mlists <[email protected]>
Date: Tue, 07 Mar 2006 12:44:44 +0100

Hi folks,

is there any way to set up an urlpath_regex that matches %AA in a URL?
Before feeding the URL into the ACL regex, squid seems to urldecode
such fancy characters:

the URL sent to squid was /public/home/image%AA%BB

2006/03/07 12:19:10| aclCheck: checking 'http_access deny enews1'
2006/03/07 12:19:10| aclMatchAclList: checking enews1
2006/03/07 12:19:10| aclMatchAcl: checking 'acl enews1 urlpath_regex SOMETHING'
2006/03/07 12:19:10| aclMatchRegex: checking '/public/home/image252273' <- 252273 is octal %AA%BB
2006/03/07 12:19:10| aclMatchAclList: no match, returning 0

The word SOMETHING shall be replaced by the regex i'm searching for.

The reason for trying to block such URLs is, that somehow a 4kB URL
consisting of mostly %[A-F][A-F] characters made our squid 2.5STABLE9 stuck.
These requests were sent from some external host to our reverse proxy.
All following request after this weird URL fail with the error:
"Forwarding loop detected for: ..."
The only way to get it into business again is to give the squid a reload.

Any help is welcome

Stefan
Received on Tue Mar 07 2006 - 04:44:11 MST

This archive was generated by hypermail pre-2.1.9 : Sat Apr 01 2006 - 12:00:03 MST