[Varnish] #500: Problem ACL in purge mode.

Varnish varnish-bugs at projects.linpro.no
Mon Apr 27 10:36:39 CEST 2009


#500: Problem ACL in purge mode.
-----------------------+----------------------------------------------------
 Reporter:  ajlozanob  |       Owner:  phk              
     Type:  defect     |      Status:  new              
 Priority:  normal     |   Milestone:  After Varnish 2.1
Component:  varnishd   |     Version:  2.0              
 Severity:  major      |    Keywords:  Purge acl        
-----------------------+----------------------------------------------------
 I'm discover that i can purge my varnish from any external ip, meanwhile i
 generate an acl:
 acl purge {
         "127.0.0.1"/32;
         }

 And in recv
 sub vcl_recv {
         if (req.request == "PURGE") {
                 if (!client.ip ~ purge) {
                         error 405 "Not allowed.";
                 }
         lookup;
         }
 /.../

 Varnishd version is:
 [root at tomcat varnish]# varnishd -V
 varnishd (varnish-2.0.3)
 Copyright (c) 2006-2008 Linpro AS / Verdens Gang AS

-- 
Ticket URL: <http://varnish.projects.linpro.no/ticket/500>
Varnish <http://varnish.projects.linpro.no/>
The Varnish HTTP Accelerator


More information about the varnish-bugs mailing list