Log Message:
Update squid package to 2.5.4nb6.

- Remove --disable-internal-dns.  It could be still enabled by adding to
  SQUID_CONFIGURE_ARGS in /etc/mk.conf.  It found that external dnsserver
  has some problem, performance disadvantage on Solaris 8.

- Apply eight official patches.

o Incomplete objects may appear stuck in the cache

	synopsis	Under certain conditions incomplete objects
			may appear stuck in the cache, not even reload
			giving a new fresh copy.
	severity	Major
	date		2003-12-23 01:23
	bugzilla	#876
	versions	Squid-2.5 and earlier
	platforms	All
	workaround	Compiling squid with --disable-http-violations
			completely avoids the issue.  Setting
			"half_closed_clients off" and making
			quick_abort as aggressively aborting as
			possible by "quick_abort_min 0 KB" and
			"quick_abort_max 0 KB" mostly hides the
			problem.

o assertion failed: pinger.c:187: "icmp_pktsize <= MAX_PKT_SZ"

	synopsis	In Squids built with --enable-icmp the pinger
			helper may exit with the above assertion
			failure if Squid receives a request with a
			very long host name.
	severity	Minor
	date		2003-12-23 01:23
	bugzilla	#865
	versions	Squid-2.5 and earlier
	platforms	All
	workaround	Don't build squid with --enable-icmp.  This is
			generally recommended anyway unless you are
			absolutely sure you want to ICMP PING random
			sites all over the Internet to measure RTT
			information even if this may trigger IDS
			systems etc.

o 000 status code being logged for redirects (should be 302)

	synopsis	Redirects initiated by redirector helpers was
			logged as TCP_MISS/000 instead of the expected
			TCP_MISS/302.  This patch corrects this and should
			also correct log_mime_hdrs output for the same.
	severity	Minor
	date		2003-12-21 16:21
	bugzilla	#869
	versions	Squid-2.5 and earlier
	platforms	All

o Update of Russian error pages

	synopsis	In a current version threre is a problem.  The
			absence of "yo" letter. ("e" with 2 dots ).
			People prefer to write "E" instead "yo", that is
			not quite correct, like "How r u" intstead "How
			are you?"
	severity	Cosmetic
	date		2003-12-21 15:21
	bugzilla	#864
	versions	Squid-2.5 and earlier
	platforms	All

o Added 'urllogin' ACL type

	synopsis	This is not a fix for a Squid bug.  It is a new
			feature to workaround an MSIE6 bug that uses
			control characters to obfuscate the true origin
			server hostname.  You can use the 'urllogin' acl
			TYPE to deny HTTP requests that contain certain
			characters in the URL login field.
	severity	Medium
	date		2003-12-19 16:19
	versions	Squid-2.5 and earlier
	platforms	All
	workaround	Patch MSIE6, if/when the patch becomes available.

o DNS resolver has too short MAXHOSTNAME

	synopsis	Squid would not process hostnames longer than 128
			characters.  This affects few hosts on the
			internet, but with the growing use of iDNA it's
			becoming an issue.
	severity	Minor
	date		2003-12-18 01:18
	bugzilla	#842
	versions	Squid-2.5 and earlier
	platforms	All
	workaround	None.

o Squid refuses to start if "pid_filename none" is specified

	synopsis	Contrary to the documentation "pid_filename none"
			is not accepted and Squid refuses to start.
	severity	Minor
	date		2003-12-17 21:17
	bugzilla	#868
	versions	Squid-2.5 and earlier
	platforms	All

o cache_peer max-conn=.. option does not work

	synopsis	Due to the a accounting mismatch in the number of
			open connections to peers the cache_peer
			max-conn=.. option does not work.  This issue is
			also seen as very high numbers in the OPEN CONN
			peer statistics via cachemgr.
	severity	Minor
	date		2003-12-20 20:20
	bugzilla	#867
	versions	Squid-2.5 and earlier
	platforms	All