Package: squid3
Version: 3.0.STABLE8-3+lenny4
Severity: important

My sources.list:

deb http://ftp.uk.debian.org/debian/ lenny main contrib non-free
deb http://security.debian.org/ lenny/updates main contrib non-free
deb http://ftp.uk.debian.org/debian-volatile/ lenny/volatile main 
contrib non-free
deb http://backports.debian.org/debian-backports lenny-backports main
deb http://download.webmin.com/download/repository sarge contrib

My squid.conf: 

# General
visible_hostname red
cache_effective_user proxy proxy
cache_mgr r...@elbourn.ukfsn.org
mail_from r...@elbourn.ukfsn.org

# Ports
http_port 3128 transparent

# Access Control Lists
acl manager proto cache_object
acl our_networks src 192.168.2.0/24
acl localhost src 127.0.0.1
acl localhost src 127.0.1.1

# Access Rules
http_access allow manager localhost
http_access deny manager
http_access allow our_networks
http_access allow localhost
http_access deny all

# Disk Cache size
cache_dir ufs /var/spool/squid3 512 16 256

#Logging
access_log /var/log/squid3/access.log squid
# cache_store_log none # /var/log/squid3/store.log
debug_options ALL,1

Through squid this happens:

aptitude -sv safe-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
Reading task descriptions... Done
The following packages will be upgraded:
  base-files dbus dbus-x11 firmware-linux-free libdbus-1-3 libsplashy1
  linux-base linux-image-2.6.32-bpo.5-amd64 man-db perl perl-base
  perl-modules
12 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 39.9MB of archives. After unpacking 283kB will be used.
Do you want to continue? [Y/n/?] y
WARNING: untrusted versions of the following packages will be installed!

Untrusted packages could compromise your system's security.
You should only proceed with the installation if you are certain that
this is what you want to do.

  base-files libdbus-1-3 perl firmware-linux-free perl-base
  linux-image-2.6.32-bpo.5-amd64 perl-modules dbus linux-base man-db
  dbus-x11 libsplashy1

Do you want to ignore this warning and proceed anyway?
To continue, enter "Yes"; to abort, enter "No": yes
Inst base-files [5lenny8] (5lenny9 Debian:5.0.8/stable)
Conf base-files (5lenny9 Debian:5.0.8/stable)
Inst perl-modules [5.10.0-19lenny2] (5.10.0-19lenny3 Debian:5.0.8/stable)
<snip>...

Squid is enforced using this rull on the firewall:

Chain PREROUTING (policy ACCEPT 145 packets, 9508 bytes)
 pkts bytes target     prot opt in     out     source               destination 
        
    0     0 DNAT       tcp  --  eth0   *      !192.168.2.104        0.0.0.0/0   
        tcp dpt:80 to:192.168.2.10:3128

Bypass squid (using the !192.168.2.104) and there are no untrusted package 
warnings. 

-- System Information:
Debian Release: 5.0.7
  APT prefers stable
  APT policy: (990, 'stable'), (50, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages squid3 depends on:
ii  adduser           3.110                  add and remove users and groups
ii  libc6             2.7-18lenny7           GNU C Library: Shared libraries
ii  libdb4.6          4.6.21-11              Berkeley v4.6 Database Libraries [
ii  libgcc1           1:4.3.2-1.1            GCC support library
ii  libldap-2.4-2     2.4.11-1+lenny2        OpenLDAP libraries
ii  libpam0g          1.0.1-5+lenny1         Pluggable Authentication Modules l
ii  libsasl2-2        2.1.22.dfsg1-23+lenny1 Cyrus SASL - authentication abstra
ii  libstdc++6        4.3.2-1.1              The GNU Standard C++ Library v3
ii  logrotate         3.7.1-5                Log rotation utility
ii  lsb-base          3.2-20                 Linux Standard Base 3.2 init scrip
ii  netbase           4.34                   Basic TCP/IP networking system
ii  squid3-common     3.0.STABLE8-3+lenny4   A full featured Web Proxy cache (H

squid3 recommends no packages.

Versions of packages squid3 suggests:
ii  resolvconf          1.42                 name server information handler
pn  smbclient           <none>               (no description available)
ii  squid3-cgi          3.0.STABLE8-3+lenny4 A full featured Web Proxy cache (H
pn  squidclient         <none>               (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to