By my experience if you see any output from following command you may be a victim grep -a 'generate_204' /var/log/squid/access.log | grep -v '/204 ' | grep -v '/000' | grep -v opera | grep -v ucweb | grep -v apple -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Cache-poisoning-vulnerability-3-5-23-tp4683215p4683216.html Sent from the Squid - Users mailing list archive at Nabble.com. _______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users