Re: [squid-users] Please! Please! Someone Answer, Squid is killing Me

From: Simon White <simon@dont-contact.us>
Date: Tue, 5 Mar 2002 12:16:03 +0000 (Greenwich Standard Time)

On Tue, 5 Mar 2002, Razvan Cosma wrote:

> > What really matters is if you can actually connect to that proxy. The
> > message in your browser is coming from Squid, not from the other proxy.
> > Squid CAN connect to that proxy. You probably can't directly connect to it
> > anyway. Try it.
> Yeaah! You are right. I can connect to SITES that listen on 8080 or whatever
>
> other port, but not to other PROXYES. I sure hope there's no exploit or smth
>
> that would allow someone to do that.

Euh... if your firewalling rule just allows users to connect to SQUID on
port 8080 you should not be able to connect to other sites on port 8080
either. Do not open port 8080 for any access, just from a lan client
(src) to the proxy (dst)

Simon
Received on Tue Mar 05 2002 - 05:16:15 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:06:42 MST