Bug 1330134 - should add --enable-arp-acl to configure options [NEEDINFO]
Summary: should add --enable-arp-acl to configure options
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: squid
Version: 23
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Luboš Uhliarik
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-04-25 12:44 UTC by Brian J. Murrell
Modified: 2016-07-18 10:29 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 1329822
Environment:
Last Closed: 2016-07-18 10:29:32 UTC
Type: Bug
luhliari: needinfo? (brian)


Attachments (Terms of Use)

Description Brian J. Murrell 2016-04-25 12:44:40 UTC
Description of problem:
The arp acl type doesn't work.

Version-Release number of selected component (if applicable):
squid-3.5.9-7

How reproducible:
100%

Steps to Reproduce:
1. Configure squid with an "acl foo arp ..."
2. Add foo to an http_access denying access
3. Try to access something through the proxy

Actual results:
Can access the denied item

Expected results:
Should be denied access

Additional info:
The configure options in the build are missing --enable-arp-acl.  I've done a local build of 3.3.8 on EL7 with it enabled and it works perfectly fine.

Comment 1 Luboš Uhliarik 2016-05-10 17:11:11 UTC
Hi Brian, 

would it be suitable for you, if I turn this feature on in F24 or Rawhide?

Comment 2 Brian J. Murrell 2016-05-10 17:36:01 UTC
Sure.  The sooner the better.  And RHEL even.  :-)

Comment 3 Luboš Uhliarik 2016-05-20 15:32:45 UTC
Hi Brian,

finally, I had few minutes to try squid how works with ARP and I didn't experience any problem.

part of my squid.conf:

acl foo arp MY_MAC
http_access deny foo
http_access allow all

Squid works as expected. Where exactly do you see the problem?

Comment 4 Brian J. Murrell 2016-05-20 21:28:10 UTC
Did you try on EL or Fedora?  Maybe it's working on one but not the other?

Comment 5 Luboš Uhliarik 2016-05-23 10:07:38 UTC
Hi Brian,

server with squid installation was running RHEL 7.2, I tried to access that website from Fedora 23 (using e.g. firefox browser). 

I haven't tried it on Fedora yet, but anyway I assumed, your testing was wrong, since you filled this bug on RHEL too, but it is working there.

Could you please try to reproduce it on RHEL and give me exact steps, how did you managed it? I tried everything, but it was always working for me.

Comment 6 Luboš Uhliarik 2016-07-18 10:29:32 UTC
Hi Brian, I'm closing this bug as NOTABUG, since it is almost 2 months, you haven't responded. 

If you think, I made a mistake feel free to reopen this bug.


Note You need to log in before you can comment on or make changes to this bug.