Only allow HTTP GET tile requests (NOT POST)

[chef.git] / cookbooks / tilecache / templates / default / squid.conf.erb

diff --git a/cookbooks/tilecache/templates/default/squid.conf.erb b/cookbooks/tilecache/templates/default/squid.conf.erb
index 2b5355ce2c6bc6a3f9123ece4c15241def8ea5f6..1c47a7a836071b538ee6e49d87e3010ec05f51d0 100644 (file)
--- a/cookbooks/tilecache/templates/default/squid.conf.erb
+++ b/cookbooks/tilecache/templates/default/squid.conf.erb
@@ -45,7 +45,9 @@ acl blacklist_path urlpath_regex ^/zecmd/
 http_access allow osmtile_sites whitelist_path
 http_access deny blacklist_path
 
-http_access allow osmtile_sites
+acl requestMethodGet method GET
+
+http_access allow osmtile_sites requestMethodGet
 
 acl osmtile_nocache_url urlpath_regex \.png/(status|dirty)$
 cache deny osmtile_sites osmtile_nocache_url
@@ -78,6 +80,12 @@ acl pool_unlimited src 64.236.163.23
 acl pool_unlimited src 66.78.217.141
 #SoTM-US 2014 Hack Day Red Cross
 acl pool_unlimited src 162.6.86.34
+acl pool_unlimited src 162.6.86.35
+acl pool_unlimited src 162.6.86.36
+#Telenav Whitelist - mvexel
+acl pool_unlimited src 108.60.98.6
+#SoTM-EU 2014
+acl pool_unlimited src 185.52.244.32/29
 
 #Allow tile_caches ICP access
 icp_access allow tile_caches