On Mon, 19 Apr 2010 08:18:35 -0800, jonr@xxxxxxxxxx wrote: > Quoting Amos Jeffries <squid3@xxxxxxxxxxxxx>: > >> jonr@xxxxxxxxxx wrote: >>> Which version did ignore_expect_100 become available the whole 2.7 >>> series or only after 2.7.Stable9? >>> >>> Thanks for the clarification, >> >> The whole 2.7 stable series have it. >> >> Amos >> -- >> Please be using >> Current Stable Squid 2.7.STABLE9 or 3.1.1 >> > > Thanks Amos! Does the 2.7 version need --enable-http-violations > compiled in or just the 3.1 series? Looking at this page: > http://www.squid-cache.org/Doc/config/ignore_expect_100/ it shows that > it is required for the 3 series but not 2.7, is that correct? > > And why do you say to be using STABLE9 or 3.1.1, does this option > cause problems in earlier versions or is there an exploit of some sort? No, just broken client software that dies horribly when receiving proper HTTP/1.1 417 responses to their HTTP/1.1 requests. Long and difficult history about the versions. The public story of why 2.6 and 2.7 releases existed is covered in the wiki history pages: http://wiki.squid-cache.org/Squid-2.6 http://wiki.squid-cache.org/Squid-2.7 Boiling it down ... 3.x is the ongoing work to match the developers plan for Squid. 2.6/2.7 are a collection of community contributions and sponsored work collected in parallel. We still have not managed to port all the sponsored work back into the 3.x series using volunteers spare time. The 3.x release notes have a regression section on whats present in 2.7/2.6 but not that particular 3.x. Meanwhile we are forced to support the very latest 2.7 release (only) for another cycle of 3.x. Amos
