Dear Amos, Can you please elaborate, I didnt understand. If possible can you explain with one example ? I mean behaviour of security and privacy flaws when strip_query_terms is on and when strip_query_terms is off.
- Akshay On Sat, May 2, 2020, 1:03 AM Amos Jeffries <squ...@treenet.co.nz> wrote: > On 2/05/20 4:43 am, Akshay Hegde wrote: > > Dear Alex, > > > > Thanks a lot, I started installing new squid on centos8 as you suggested. > > > > I got one more doubt its about logging. > > > > I have below option globally, which I don't want to make "off" > > strip_query_terms on > > > > and my ACL as follows: > > logformat squid_custom %ts.%03tu %6tr %>a %Ss/%>Hs %<st %rm %ru %un > > %Sh/%<A %mt > > acl track dstdomain "/etc/squid/sites_track.txt" > > access_log /var/log/squid/full_site_links.log squid_custom track > > > > however for specific ACL I would like to log full URL with query > > parameters, how this can be done ? > > > > If you are upgrading to a Squid with annotation support you can use an > external ACL helper to do the URL mangling you want for a custom log > %note column. > Otherwise there is only that global on/off setting. > > > NP: stripping query-string is a very weak workaround for > security+privacy flaws. Any details hidden are being published elsewhere > anyway. All it does is prevent local detection of important information > leaks. > > Amos > _______________________________________________ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users >
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users