The best thing is to patch your bash. From: Eliezer Croitoru-2 [via Squid Web Proxy Cache] [mailto:ml-node+s1019090n4667556h96@xxxxxxxxxxxxx] Sent: Monday, September 29, 2014 7:33 AM To: geekguy Subject: Re: shellshock pattern ? On 09/29/2014 05:22 PM, [hidden email] wrote: > WE need to filter out "() { :;};" patterns If I understand correctly, Not exactly since http uses encoding on urls. it will needed to be with percents and weird values. You will need ICAP\ECAP level of inspection to make sure nobody is bitten by it. It will by much faster to just patch bash. All The Bests, Eliezer _______________________________________________ squid-users mailing list [hidden email] http://lists.squid-cache.org/listinfo/squid-users _____ If you reply to this email, your message will be added to the discussion below: http://squid-web-proxy-cache.1019090.n4.nabble.com/shellshock-pattern-tp4667 553p4667556.html To start a new topic under Squid - Users, email ml-node+s1019090n1019091h81@xxxxxxxxxxxxx <mailto:ml-node+s1019090n1019091h81@xxxxxxxxxxxxx> To unsubscribe from Squid - Users, click here <http://squid-web-proxy-cache.1019090.n4.nabble.com/template/NamlServlet.jtp ?macro=unsubscribe_by_code&node=1019091&code=Z2Vla2d1eUBnZWVrLWd1eS5jb218MTA xOTA5MXwtMTE0MTM3MTc2Mg==> . <http://squid-web-proxy-cache.1019090.n4.nabble.com/template/NamlServlet.jtp ?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.n amespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.vie w.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail .naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aema il.naml> NAML -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/shellshock-pattern-tp4667553p4667557.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
