Dear DeleGate users, I inform you of the new release of DeleGate available as follows: -------------------------------------------------------------------------- DeleGate/8.11.3 -- fixed permission for SSLtunnel and STLS, Cookie to/from HTTPS/HTTP Fixed so that "SSL tunneling" is forbidden solely with RELAY="no" option. The option was intended to be used, as written in the reference manual (Manual.htm), to let DeleGate work as an origin HTTP server without proxy functionality. But the "SSL tunneling", or proxying with CONNECT methos, has not been forbidden with the option. To forbid it, the REMITTABLE parameter was necessary to be set excluding "https" in its values, but the default value of the parameter is REMITTABLE="http,https/{80,443},gopher,ftp,wais" for HTTP-DeleGate (DeleGate running with SERVER=http). This means that the DeleGate with RELAY="no" could still be utilized as a relay to arbitrary server on standard HTTP and HTTPS port, if no REACHABLE parameter is specified to restrict reachable servers from the DeleGate. This problem was fixed in this release so that RELAY="no" is enough to forbid such relaying. -------------------------------------------------------------------------- SITE: ftp://ftp.delegate.org/pub/DeleGate/ FILE: delegate8.11.3.tar.{gz,bz2} DATE: Apr 22 03:29 JST 2005 TAR-SIZE: 4802560 bytes TAR-MD5: d9bfc882acc9b173a0ac4578a1f9f3b2 PUBLIC-KEY: http://www.delegate.org/rsa-pubkey.pem TAR-MD5-SIGN: qhIWz2E63dOWwY1P/DjPCkvlNyXHqBJGI83rLKw3FRUXzCACK+CuKqjiAS7aV5kFjIyLCGpS f3ge3mEoX7hFRnH9RRQCHmLJmFGUtt7kFnYly2eScA98UsShQqxsz45TUNNLqj1x79JvLc35 Ii5NR48zBLzlwEpQlbnIgsOVG8s= [NEW] [CHANGE] [FIX] * HTTP: fixed to forbid CONNECT by RELAY=no (without RELAY=proxy) + STLS/FTP: fixed to reject non-SSL FTP client with STLS=fcl + SOCKS: fixed Socks5 CONNECT work with FTOSV,FFROMSV + HTTP: fixed Cookie rewriting for HTTPS/HTTP MOUNT + CFI: fixed Header-Filter (since 8.10.3) Cheers, Yutaka -- D G Yutaka Sato <y.sato@delegate.org> http://delegate.org/y.sato/ ( - ) National Institute of Advanced Industrial Science and Technology _< >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan Do the more with the less -- B. Fuller