Search squid archive

Re: SECURITY ALERT: Squid Cache: Version 3.2.0.13

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> 
> Yes, welcome to the host header forgery mess. I don't know who
> benefited from this but a lot of people got bitten by it.
> 
> I mentioned this first day
> http://bugs.squid-cache.org/show_bug.cgi?id=3325
> 
> Anyone doing ANYCAST will be screwed (and a whole lotta people do
> that).
> 
> p4$ host download.windowsupdate.com
> mscom-wui-any.vo.msecnd.net has address 70.37.129.251
> mscom-wui-any.vo.msecnd.net has address 70.37.129.244
> 
> p12$ host download.windowsupdate.com
> a26.ms.akamai.net.0.1.cn.akamaitech.net has address 92.123.69.42
> a26.ms.akamai.net.0.1.cn.akamaitech.net has address 92.123.69.8
> a26.ms.akamai.net.0.1.cn.akamaitech.net has address 92.123.69.24
> a26.ms.akamai.net.0.1.cn.akamaitech.net has address 92.123.69.26
> a26.ms.akamai.net.0.1.cn.akamaitech.net has address 92.123.69.41
> 
> Jenny

It's strange, how to explain that I don't have this problem.
I am using two Squid 3.2.0.13-20111129-r11445 (with http://bugs.squid-cache.org/attachment.cgi?id=2539 and http://bugs.squid-cache.org/attachment.cgi?id=2574) in production 

du -h /var/log/squid/access.log
2,2G -> high traffic

grep SECUR /var/log/squid/cache.log -> Nothing

And no complaint from a user
Perhaps, You used transparent proxy like David, or a same option in Squid.conf ? 




[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux