[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1120857: proxy_connect.conf: behaviour of `AllowCONNECT 0` is not ensured



Package: apache2
Version: 2.4.65-2
Severity: normal


Hey.

I've had noticed that you've introduced the setting of
  AllowCONNECT 0
per default,... and further that upstream doesn't document that as disabling
CONNECT, as it's used by Debian.

It simply works because nothing has port 0 (not sure whether one could do some local
packet mangling to get something to use port 0).

So I've opened a ticket:
  https://bz.apache.org/bugzilla/show_bug.cgi?id=69879
asking whether this could be made offcial by documenting it.

Response was howver rather that they would prefer some patch that introduces
a `none` keyword.

In particular it shall be noted, that some earlier upstream feature request
already tried to get the behaviour of 0 being the wildcard and thus alowing
*any* ports (but wasn't merged).


So this is primarily a heads up, that the current behaviour of 0 is
rather just an implementation detail and not really guaranteed.


Cheers,
Chris.


Reply to: