Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-10-01 Thread Manuel
Hi again, Thank you for all the information regarding this matter. Anyhow, I must say that I changed in my message the origin server to 127.0.0.1 just to not make public the real address of the origin server but the address that was made public was the real IP of that origin server which was acces

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-27 Thread Eliezer Croitoru
Hey Xen, I am not really a proxy expert and I am not really such a great security guy but both you and Amos are right. There are cases which revealing an internal IP address is a bad practice. Also there are other ways to identify the internal host which causes issues. In the specific case of

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-27 Thread Xen
Again, impressed by your knowledge. But I'm not really arguing against your knowledge. It is basically a principle choice to /call/ one thing security and the other privacy based on the impression or experience that the one thing provides actual defenses or benefits in certain common scenario's

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Amos Jeffries
On 27/09/2015 2:09 p.m., Xen wrote: > On Sun, 27 Sep 2015, Amos Jeffries wrote: > >> On 26/09/2015 11:48 p.m., Manuel wrote: > >>> When Squid -even as a reverse proxy (which is my concern)- can not >>> retrieve the requested URL, it dicloses the IP address of the server >>> trying to contact with

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Xen
On Sun, 27 Sep 2015, Amos Jeffries wrote: On 26/09/2015 11:48 p.m., Manuel wrote: When Squid -even as a reverse proxy (which is my concern)- can not retrieve the requested URL, it dicloses the IP address of the server trying to contact with. Is there any way to hide that IP address to the p

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Amos Jeffries
On 26/09/2015 11:48 p.m., Manuel wrote: > When Squid -even as a reverse proxy (which is my concern)- can not retrieve > the requested URL, it dicloses the IP address of the server trying to > contact with. Is there any way to hide that IP address to the public for > security reasons? This is not a

Re: [squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Eliezer Croitoru
Hey Manuel, The reason the client receives the destination IP or other details is due to the structure of the ERROR page. Depends on your OS you can find the ERROR page file and modify it so the format will meet your requirements. You can take a look at the wiki about custom error pages: http:

[squid-users] How to avoid Squid disclosing the origin server IP when there is an error

2015-09-26 Thread Manuel
When Squid -even as a reverse proxy (which is my concern)- can not retrieve the requested URL, it dicloses the IP address of the server trying to contact with. Is there any way to hide that IP address to the public for security reasons? Example of the error message I am referring to: "The requeste