wccp and proxy-auth/FTP-problem

[Heinz Ahrens]

Hallo Squid-Users,

I have got 2 little questions:

1. wccp

in future i want to use our squid-cache (2.3.STABLE???) with a
cisco-router and wccp.

My question:

Is there a problem with proxy-auth. Can i tell the router, that perhaps
"odd" IPs go to the one and "even" IPs to the other squid-chache. If the proxy
change the user must perhaps logon 2 times, or ???
If one proxy goes down, the second logon is correct.

2. FTP

If i use FTP i must authenticate again, because of the squid-symbols of
the FTP-directory, for example:

http://gate1a:3128/squid-internal-static/icons/anthony-dir.gif

Ok, i can permit all connection to the port 3128 without authentication,
but is this ok ??? Can't i modify squid.conf ???

Greetings from Germany

Heinz Ahrens

--
Sent through Global Message Exchange - http://www.gmx.net

[Henrik Nordstrom]

Heinz Ahrens wrote:

> Is there a problem with proxy-auth.

Yes. proxy-auth requires the use of a proxy. Transparent redirection to
a proxy is not use of a proxy, it is hijacking of server intended
traffic by a proxy.

WCCP is no more than a fancy way to hijack traffic.

> 2. FTP
>
> If i use FTP i must authenticate again, because of the squid-symbols of
> the FTP-directory, for example:

acl icons urlpath_regex ^/squid-internal-static/icons
http_access allow icons

prior to you http_access line requiring proxy authentication.

--
Henrik Nordstrom
Squid hacker