Re: [squid-users] ignore_expect_100

On Mon, 19 Apr 2010 08:18:35 -0800, jonr_at_destar.net wrote:
> Quoting Amos Jeffries <squid3_at_treenet.co.nz>:
>
>> jonr_at_destar.net wrote:
>>> Which version did ignore_expect_100 become available the whole 2.7
>>> series or only after 2.7.Stable9?
>>>
>>> Thanks for the clarification,
>>
>> The whole 2.7 stable series have it.
>>
>> Amos
>> --
>> Please be using
>> Current Stable Squid 2.7.STABLE9 or 3.1.1
>>
>
> Thanks Amos! Does the 2.7 version need --enable-http-violations
> compiled in or just the 3.1 series? Looking at this page:
> http://www.squid-cache.org/Doc/config/ignore_expect_100/ it shows that
> it is required for the 3 series but not 2.7, is that correct?
>
> And why do you say to be using STABLE9 or 3.1.1, does this option
> cause problems in earlier versions or is there an exploit of some sort?

No, just broken client software that dies horribly when receiving proper
HTTP/1.1 417 responses to their HTTP/1.1 requests.

Long and difficult history about the versions.
The public story of why 2.6 and 2.7 releases existed is covered in the
wiki history pages:
  http://wiki.squid-cache.org/Squid-2.6
  http://wiki.squid-cache.org/Squid-2.7

Boiling it down ...
 3.x is the ongoing work to match the developers plan for Squid. 2.6/2.7
are a collection of community contributions and sponsored work collected in
parallel. We still have not managed to port all the sponsored work back
into the 3.x series using volunteers spare time. The 3.x release notes have
a regression section on whats present in 2.7/2.6 but not that particular
3.x.
 Meanwhile we are forced to support the very latest 2.7 release (only) for
another cycle of 3.x.

Amos
Received on Tue Apr 20 2010 - 00:41:43 MDT