[squid-users] SSL Bump with HTTP Cache Peer Parent

2019-07-13 Thread mikio . kishi
Hi all, https://www.spinics.net/lists/squid/msg90523.html As mentioned in the above URL, I would like to use "SSL Bump with HTTP Cache Peer Parent" as well. However, still seems not be supported like the following. - FwdState.cc (in squid-4.8 which is currect stable version) 825 FwdState::c

Re: [squid-users] Squid security advisories

2019-07-13 Thread Amos Jeffries
On 14/07/19 3:17 pm, TarotApprentice wrote: > Thanks. Debian still have 4.6. I’ll raise a bug for Debian in the hope they > will get them into Buster and Stretch via their backports repos. They seem to > ignore emails, even to the maintainer group. > Already packaged and awaiting Luigis' test a

Re: [squid-users] Squid security advisories

2019-07-13 Thread TarotApprentice
Thanks. Debian still have 4.6. I’ll raise a bug for Debian in the hope they will get them into Buster and Stretch via their backports repos. They seem to ignore emails, even to the maintainer group. > On 14 Jul 2019, at 12:24 pm, Amos Jeffries wrote: > >> On 14/07/19 11:04 am, TarotApprentice

Re: [squid-users] Squid security advisories

2019-07-13 Thread Amos Jeffries
On 14/07/19 11:04 am, TarotApprentice wrote: > On the Squid-Announce list there were advisories 2019:1, 2, 3, 5 and 6. Was > there a 2019:4 that was missed? > Yes and no. There is a :4 issue. But the fix turned out to be incomplete so did not make it into this release. Amos ___

[squid-users] Squid security advisories

2019-07-13 Thread TarotApprentice
On the Squid-Announce list there were advisories 2019:1, 2, 3, 5 and 6. Was there a 2019:4 that was missed? MarkJ ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] [squid-announce] Squid 4.8 is available

2019-07-13 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-4.8 release! This release is a security release resolving several issues found in the prior Squid releases. The major changes to be aware of: * SQUID-2019:1 Denial of Service issue in cachemgr.cgi (CVE-201

[squid-users] [squid-announce] [ADVISORY] SQUID-2019:5 Heap Overflow issue in HTTP Basic Authentication processing

2019-07-13 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2019:5 __ Advisory ID:SQUID-2019:5 Date: July 12, 2019 Summary:Heap Overflow is

[squid-users] [squid-announce] [ADVISORY] SQUID-2019:6 Multiple Cross-Site Scripting issues in cachemgr.cgi

2019-07-13 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2019:6 __ Advisory ID:SQUID-2019:6 Date: July 12, 2019 Summary:Multiple Cross-S

[squid-users] [squid-announce] [ADVISORY] SQUID-2019:3 Denial of Service in HTTP Digest Authentication processing

2019-07-13 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2019:3 __ Advisory ID:SQUID-2019:3 Date: July 12, 2019 Summary:Denial of Servic

[squid-users] [squid-announce] [ADVISORY] SQUID-2019:2 Denial of Service in HTTP Basic Authentication processing

2019-07-13 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2019:2 __ Advisory ID:SQUID-2019:2 Date: July 12, 2019 Summary:Denial of Servic

[squid-users] [squid-announce] [ADVISORY] SQUID-2019:1 Denial of Service issue in cachemgr.cgi

2019-07-13 Thread Amos Jeffries
__ Squid Proxy Cache Security Update Advisory SQUID-2019:1 __ Advisory ID:SQUID-2019:1 Date: July 12, 2019 Summary:Denial of Servic

Re: [squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread Alex Rousskov
On 7/13/19 7:37 AM, Amos Jeffries wrote: > On 13/07/19 9:55 pm, --Ahmad-- wrote: >> i want it when squid access / contact with 1.2.3.4 > Use "dst" ACL for destination IP's. > However, requests are generated before sending. Squid does not know > which IP will *in future* be used to deliver the req

Re: [squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread Amos Jeffries
On 13/07/19 9:55 pm, --Ahmad-- wrote: > > > i want it when squid access / contact with 1.2.3.4 > > Use "dst" ACL for destination IP's. However, requests are generated before sending. Squid does not know which IP will *in future* be used to deliver the request. So this is unlikely to work prop

Re: [squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread --Ahmad--
i want it when squid access / contact with 1.2.3.4 Thanks > On 13 Jul 2019, at 12:36, Matus UHLAR - fantomas wrote: > > when accessing 1.2.3.4 or whn your client is 1.2.3.4? ___ squid-users mailing list squid-users@lists.squid-cache.org http://

Re: [squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread Matus UHLAR - fantomas
On 13.07.19 12:20, --Ahmad-- wrote: say i have a set of rules to block some certain types of headers as below : header_access Pragma deny all header_access Keep-Alive deny all but i want those above two headers allowed when accessing ip 1.2.3.4 is my config below is correct ? i tested but di

[squid-users] allowing headers per ip and block headers on others

2019-07-13 Thread --Ahmad--
hello folks . say i have a set of rules to block some certain types of headers as below : header_access Pragma deny all header_access Keep-Alive deny all but i want those above two headers allowed when accessing ip 1.2.3.4 is my config below is correct ? i tested but didn’t work acl allowip