Dear Amos,
Can you please elaborate, I didnt understand. If possible can you explain with one example ? I mean behaviour of security and privacy flaws when
strip_query_terms is on and when strip_query_terms is off.
- Akshay
On Sat, May 2, 2020, 1:03 AM Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:
On 2/05/20 4:43 am, Akshay Hegde wrote:
> Dear Alex,
>
> Thanks a lot, I started installing new squid on centos8 as you suggested.
>
> I got one more doubt its about logging.
>
> I have below option globally, which I don't want to make "off"
> strip_query_terms on
>
> and my ACL as follows:
> logformat squid_custom %ts.%03tu %6tr %>a %Ss/%>Hs %<st %rm %ru %un
> %Sh/%<A %mt
> acl track dstdomain "/etc/squid/sites_track.txt"
> access_log /var/log/squid/full_site_links.log squid_custom track
>
> however for specific ACL I would like to log full URL with query
> parameters, how this can be done ?
>
If you are upgrading to a Squid with annotation support you can use an
external ACL helper to do the URL mangling you want for a custom log
%note column.
Otherwise there is only that global on/off setting.
NP: stripping query-string is a very weak workaround for
security+privacy flaws. Any details hidden are being published elsewhere
anyway. All it does is prevent local detection of important information
leaks.
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx http://lists.squid-cache.org/listinfo/squid-users
